Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
address this issue. The name of the patch is 6d7168cbf12d1c183bacc5cd5678f6f5b0d518d2. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222268. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222268 - https://vuldb.com/?ctiid.222268 - https://github.com/wp-plugins/cp-polls/commit/6d7168cbf12d1c183bacc5cd5678f6f5b0d518d2 - https://github.com/wp-plugins/cp-polls/releases/tag/1.0.2
CVE ID: CVE-2014-125092 State: PUBLISHED Published: 2023-03-05T20:31:04.208Z Last Updated: 2025-03-05T19:25:00.947Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MaxButtons Plugin Problem Types: CWE-79 Description: A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttons_strip_px of the file includes/maxbuttons-button.php. The manipulation of the argument button_id leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.26.1 is able to address this issue. The patch is named e74564c9e3b7429808e317f4916bd1c26ef0b806. It is recommended to upgra
1 is able to address this issue. The patch is named e74564c9e3b7429808e317f4916bd1c26ef0b806. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222323. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222323 - https://vuldb.com/?ctiid.222323 - https://github.com/wp-plugins/maxbuttons/commit/e74564c9e3b7429808e317f4916bd1c26ef0b806 - https://github.com/wp-plugins/maxbuttons/releases/tag/1.26.1
CVE ID: CVE-2014-125093 State: PUBLISHED Published: 2023-03-10T02:00:04.754Z Last Updated: 2024-08-06T14:10:56.616Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Ad Blocking Detector Plugin Problem Types: CWE-200 Description: A vulnerability has been found in Ad Blocking Detector Plugin up to 1.2.1 on WordPress and classified as problematic. This vulnerability affects unknown code of the file ad-blocking-detector.php. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 1.2.2 is able to address this issue. The patch is identified as 3312b9cd79e5710d1e282fc9216a4e5ab31b3d94. It is recomme
1.2.2 is able to address this issue. The patch is identified as 3312b9cd79e5710d1e282fc9216a4e5ab31b3d94. It is recommended to upgrade the affected component. VDB-222610 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222610 - https://vuldb.com/?ctiid.222610 - https://github.com/wp-plugins/ad-blocking-detector/commit/3312b9cd79e5710d1e282fc9216a4e5ab31b3d94 - https://github.com/wp-plugins/ad-blocking-detector/releases/tag/1.2.2
CVE ID: CVE-2014-125094 State: PUBLISHED Published: 2023-04-06T21:00:05.164Z Last Updated: 2024-11-22T21:38:29.776Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: phpMiniAdmin Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in phpMiniAdmin up to 1.8.120510. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.9.140405 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-225001 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - C
nt. The identifier VDB-225001 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225001 - https://vuldb.com/?ctiid.225001 - https://github.com/osalabs/phpminiadmin/blob/master/changelog.md
CVE ID: CVE-2014-125095 State: PUBLISHED Published: 2023-04-09T05:31:04.461Z Last Updated: 2024-08-06T14:10:56.681Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: BestWebSoft Products: Contact Form Plugin Problem Types: CWE-79 Description: A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The name of the patch is 4d531f74b4a801c805dc80360d4ea1312e9a278f.
ding to version 1.3.7 is able to address this issue. The name of the patch is 4d531f74b4a801c805dc80360d4ea1312e9a278f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-225320. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225320 - https://vuldb.com/?ctiid.225320 - https://github.com/wp-plugins/contact-form-plugin/commit/4d531f74b4a801c805dc80360d4ea1312e9a278f
CVE ID: CVE-2014-125096 State: PUBLISHED Published: 2023-04-10T03:00:05.619Z Last Updated: 2024-08-06T14:10:56.630Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Fancy Gallery Plugin Problem Types: CWE-79 Description: A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file class.options.php of the component Options Page. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.13 is able to address this issue. The identifier of the patch is fdf1f9e5a1ec738900f962e69c6fa4ec6055ed8d. It is reco
.5.13 is able to address this issue. The identifier of the patch is fdf1f9e5a1ec738900f962e69c6fa4ec6055ed8d. It is recommended to upgrade the affected component. The identifier VDB-225349 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225349 - https://vuldb.com/?ctiid.225349 - https://github.com/wp-plugins/fancy-gallery/commit/fdf1f9e5a1ec738900f962e69c6fa4ec6055ed8d
CVE ID: CVE-2014-125097 State: PUBLISHED Published: 2023-04-10T03:00:07.136Z Last Updated: 2024-08-06T14:10:56.657Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: BestWebSoft Products: Facebook Like Button Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrad
to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225354 - https://vuldb.com/?ctiid.225354 - https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c
CVE ID: CVE-2014-125098 State: PUBLISHED Published: 2023-04-10T03:31:03.252Z Last Updated: 2025-02-07T19:37:14.998Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Dart Products: http_server Problem Types: CWE-79 Description: A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtual_directory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.9.6 is able to address this issue. The name of the patch is 27c1cbd8125bb0369e675eb72e4821
otely. Upgrading to version 0.9.6 is able to address this issue. The name of the patch is 27c1cbd8125bb0369e675eb72e48218496e48ffb. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-225356. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225356 - https://vuldb.com/?ctiid.225356 - https://codereview.chromium.org/225813002 - https://github.com/dart-archive/http_server/commit/27c1cbd8125bb0369e675eb72e48218496e48ffb - https://github.com/dart-archive/http_server/releases/tag/0.9.6
CVE ID: CVE-2014-125099 State: PUBLISHED Published: 2023-04-20T05:31:03.692Z Last Updated: 2024-08-06T14:10:56.621Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: I Recommend This Plugin Problem Types: CWE-89 Description: A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to version 3.7.3 is able to address this issue. The identifier of the patch is 058b3ef5c7577bf557557904a53ecc8599b13649. It is recommended to upgrade the af
this issue. The identifier of the patch is 058b3ef5c7577bf557557904a53ecc8599b13649. It is recommended to upgrade the affected component. The identifier VDB-226309 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226309 - https://vuldb.com/?ctiid.226309 - https://github.com/wp-plugins/i-recommend-this/commit/058b3ef5c7577bf557557904a53ecc8599b13649 - https://github.com/wp-plugins/i-recommend-this/releases/tag/3.7.3
CVE ID: CVE-2014-125100 State: PUBLISHED Published: 2023-05-02T02:00:06.905Z Last Updated: 2024-08-06T14:10:56.752Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: BestWebSoft Products: Job Board Plugin Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 is able to address this issue. The name of the patch is dbb71deee071422ce3e663fbcdce3ad24886f940. It is recommended to upgrade the affected component. The identifier of this vulnerability is VD
3e663fbcdce3ad24886f940. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227764. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227764 - https://vuldb.com/?ctiid.227764 - https://github.com/wp-plugins/job-board/commit/dbb71deee071422ce3e663fbcdce3ad24886f940
CVE ID: CVE-2014-125101 State: PUBLISHED Published: 2023-05-28T12:31:03.410Z Last Updated: 2024-08-06T14:10:56.639Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Portfolio Gallery Plugin Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifier of the patch is 58ed88243e17df766036f4857041edaf358076d3. It is recommended to upgrade the affected component. The identifier VDB-230085 was assigned
f766036f4857041edaf358076d3. It is recommended to upgrade the affected component. The identifier VDB-230085 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230085 - https://vuldb.com/?ctiid.230085 - https://github.com/wp-plugins/portfolio-gallery/commit/58ed88243e17df766036f4857041edaf358076d3
CVE ID: CVE-2014-125102 State: PUBLISHED Published: 2023-05-29T22:31:03.530Z Last Updated: 2025-03-05T18:58:51.822Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Bestwebsoft Products: Relevant Plugin Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.0.8 is able to address this issue. The identifier of the patch is 860d1891025548cf0f5f97364c1f51a888f523c3. It is
ion 1.0.8 is able to address this issue. The identifier of the patch is 860d1891025548cf0f5f97364c1f51a888f523c3. It is recommended to upgrade the affected component. The identifier VDB-230113 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230113 - https://vuldb.com/?ctiid.230113 - https://github.com/wp-plugins/relevant/commit/860d1891025548cf0f5f97364c1f51a888f523c3
CVE ID: CVE-2014-125103 State: PUBLISHED Published: 2023-05-31T03:00:03.284Z Last Updated: 2025-03-05T18:58:44.702Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: BestWebSoft Products: Twitter Plugin Problem Types: CWE-79 Description: A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttr_settings_page of the file twitter.php. The manipulation of the argument twttr_url_twitter/bws_license_key/bws_license_plugin leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The patch is named e04d59ab5
attack can be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The patch is named e04d59ab578316ffeb204cf32dc71c0d0e1ff77c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230155. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230155 - https://vuldb.com/?ctiid.230155 - https://github.com/wp-plugins/twitter-plugin/commit/e04d59ab578316ffeb204cf32dc71c0d0e1ff77c
CVE ID: CVE-2014-125104 State: PUBLISHED Published: 2023-06-01T13:00:04.016Z Last Updated: 2025-03-05T18:58:37.698Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: VaultPress Plugin Problem Types: CWE-434 Description: A vulnerability was found in VaultPress Plugin up to 1.6.0 on WordPress. It has been declared as critical. Affected by this vulnerability is the function protect_aioseo_ajax of the file class.vaultpress-hotfixes.php of the component MailPoet Plugin. The manipulation leads to unrestricted upload. The attack can be launched remotely. Upgrading to version 1.6.1 is able to address this issue. The patch is named e3b92b14edca6291c5f998d54c90cbe98a1fb0e3. It
pgrading to version 1.6.1 is able to address this issue. The patch is named e3b92b14edca6291c5f998d54c90cbe98a1fb0e3. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230263. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230263 - https://vuldb.com/?ctiid.230263 - https://github.com/wp-plugins/vaultpress/commit/e3b92b14edca6291c5f998d54c90cbe98a1fb0e3 - https://github.com/wp-plugins/vaultpress/releases/tag/1.6.1
CVE ID: CVE-2014-125105 State: PUBLISHED Published: 2023-06-05T01:00:04.015Z Last Updated: 2024-08-06T14:10:56.648Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Broken Link Checker Plugin Problem Types: CWE-79 Description: A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function options_page of the file core/core.php of the component Settings Page. The manipulation of the argument exclusion_list/blc_custom_fields leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.10.2 is able to address this issue. The patch is nam
ipting. The attack can be launched remotely. Upgrading to version 1.10.2 is able to address this issue. The patch is named 90615fe9b0b6f9e6fb254d503c302e53a202e561. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230659. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230659 - https://vuldb.com/?ctiid.230659 - https://github.com/wp-plugins/broken-link-checker/commit/90615fe9b0b6f9e6fb254d503c302e53a202e561 - https://github.com/wp-plugins/broken-link-checker/releases/tag/1.10.2
CVE ID: CVE-2014-125106 State: PUBLISHED Published: 2023-06-17T00:00:00 Last Updated: 2024-12-17T15:49:54.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nanopb/nanopb/commit/d2099cc8f1adb33d427a44a5e32ed27b647c7168 - https://github.com/nanopb/nanopb/blob/master/CHANGELOG.txt - https://github.com/nanopb/nanopb/compare/nanopb-0.3.0...nanopb-0.3.1
CVE ID: CVE-2014-125107 State: PUBLISHED Published: 2023-12-19T02:00:05.089Z Last Updated: 2024-08-06T14:10:56.666Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Corveda Products: PHPSandbox Problem Types: CWE-693 Description: A vulnerability was found in Corveda PHPSandbox 1.3.4 and classified as critical. Affected by this issue is some unknown functionality of the component String Handler. The manipulation leads to protection mechanism failure. The attack may be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The patch is identified as 48fde5ffa4d76014bad260a3cbab7ada3744a4cc. It is recommended to upgrade the affected compone
. The patch is identified as 48fde5ffa4d76014bad260a3cbab7ada3744a4cc. It is recommended to upgrade the affected component. VDB-248270 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248270 - https://vuldb.com/?ctiid.248270 - https://github.com/Corveda/PHPSandbox/commit/48fde5ffa4d76014bad260a3cbab7ada3744a4cc - https://github.com/Corveda/PHPSandbox/releases/tag/v1.3.5
CVE ID: CVE-2014-125108 State: PUBLISHED Published: 2023-12-23T16:31:04.015Z Last Updated: 2024-08-06T14:10:56.690Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: w3c Products: online-spellchecker-py Problem Types: CWE-79 Description: A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the file spellchecker. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The identifier of the patch is d6c21fd8187c5db2a50425ff80694149e75d722e. It is recomm
oitation is known to be difficult. The identifier of the patch is d6c21fd8187c5db2a50425ff80694149e75d722e. It is recommended to apply a patch to fix this issue. The identifier VDB-248849 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.248849 - https://vuldb.com/?ctiid.248849 - https://github.com/w3c/online-spellchecker-py/commit/d6c21fd8187c5db2a50425ff80694149e75d722e
CVE ID: CVE-2014-125109 State: PUBLISHED Published: 2023-12-26T15:00:04.525Z Last Updated: 2024-08-06T14:10:56.624Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: BestWebSoft Products: Portfolio Plugin Problem Types: CWE-79 Description: A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 2.28 is able to address this issue. The name of the patch is d2ede580474665af56ff262a05783fbabe4529b8. It is
to version 2.28 is able to address this issue. The name of the patch is d2ede580474665af56ff262a05783fbabe4529b8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248956. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248956 - https://vuldb.com/?ctiid.248956 - https://github.com/wp-plugins/portfolio/commit/d2ede580474665af56ff262a05783fbabe4529b8
CVE ID: CVE-2014-125110 State: PUBLISHED Published: 2024-03-31T23:31:04.748Z Last Updated: 2024-08-06T14:10:56.704Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: wp-file-upload Plugin Problem Types: CWE-79 Description: A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfu_ajax_action_callback of the file lib/wfu_ajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.4.4 is able to address this issue. The identifier of the patch is c846327df030a0a97da036a2f07c769ab9284ddb. It is recommended
s able to address this issue. The identifier of the patch is c846327df030a0a97da036a2f07c769ab9284ddb. It is recommended to upgrade the affected component. The identifier VDB-258781 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258781 - https://vuldb.com/?ctiid.258781 - https://github.com/wp-plugins/wp-file-upload/commit/c846327df030a0a97da036a2f07c769ab9284ddb - https://github.com/wp-plugins/wp-file-upload/releases/tag/2.4.4
CVE ID: CVE-2014-125111 State: PUBLISHED Published: 2024-04-08T13:00:07.717Z Last Updated: 2024-08-06T14:10:56.636Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: namithjawahar Products: Wp-Insert Problem Types: CWE-79 Description: A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.9 is able to address this issue. The name of the patch is a07b7b08084b9b85859f3968ce7fde0fd1fcbba3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB
9f3968ce7fde0fd1fcbba3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-259628. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259628 - https://vuldb.com/?ctiid.259628 - https://github.com/wp-plugins/wp-insert/commit/a07b7b08084b9b85859f3968ce7fde0fd1fcbba3
CVE ID: CVE-2014-125113 State: PUBLISHED Published: 2025-08-05T19:58:17.347Z Last Updated: 2025-11-21T00:30:41.693Z Vendors: Dell/Quest Products: KACE K1000 Systems Management Appliance Problem Types: CWE-434, CWE-306 Description: An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible directory, which are later executed through inclusion in backend code that loads files under attacker-controlled paths. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
in backend code that loads files under attacker-controlled paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/dell_kace_k1000_upload.rb - http://console-cowboys.blogspot.com/2014/03/the-curious-case-of-ninjamonkeypiratela.html - https://www.exploit-db.com/exploits/39693 - https://www.vulncheck.com/advisories/dell-quest-kace-k1000-unauth-file-upload-rce