Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1003 State: PUBLISHED Published: 2023-02-24T07:53:26.836Z Last Updated: 2024-08-02T05:32:46.228Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Typora Problem Types: CWE-94 Description: A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.8 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulne
n 1.5.8 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221736. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221736 - https://vuldb.com/?ctiid.221736 - https://github.com/typora/typora-issues/issues/5623
CVE ID: CVE-2023-1004 State: PUBLISHED Published: 2023-02-24T07:56:07.099Z Last Updated: 2024-11-22T21:58:30.907Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: MarkText Problem Types: CWE-94 Description: A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221737 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progra
ic and may be used. The identifier VDB-221737 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221737 - https://vuldb.com/?ctiid.221737 - https://github.com/marktext/marktext/issues/3575
CVE ID: CVE-2023-1005 State: PUBLISHED Published: 2023-02-24T08:00:18.381Z Last Updated: 2024-08-02T05:32:46.388Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: JP1016 Products: Markdown-Electron Problem Types: CWE-94 Description: A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-221738 is
ses is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-221738 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221738 - https://vuldb.com/?ctiid.221738 - https://github.com/JP1016/Markdown-Electron/issues/3
CVE ID: CVE-2023-1006 State: PUBLISHED Published: 2023-02-24T08:21:31.872Z Last Updated: 2025-03-11T15:51:20.548Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Medical Certificate Generator App Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suffix with the input "><script>prompt(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The associ
t "><script>prompt(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221739. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221739 - https://vuldb.com/?ctiid.221739
CVE ID: CVE-2023-1007 State: PUBLISHED Published: 2023-02-24T10:23:59.178Z Last Updated: 2024-08-02T05:32:46.463Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Twister Products: Antivirus Problem Types: CWE-284 Description: A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221740. Additional Analyst Notes: -
disclosed to the public and may be used. The identifier of this vulnerability is VDB-221740. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221740 - https://vuldb.com/?ctiid.221740 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1007 - https://drive.google.com/file/d/1wh20g2Ze4gwCtripe7QeHNXd3bS4aZNG/view?usp=sharing
CVE ID: CVE-2023-1008 State: PUBLISHED Published: 2023-02-24T10:24:01.015Z Last Updated: 2024-08-02T05:32:46.252Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Twister Products: Antivirus Problem Types: CWE-404 Description: A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
ublic and may be used. The identifier VDB-221741 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221741 - https://vuldb.com/?ctiid.221741 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008 - https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing
CVE ID: CVE-2023-1009 State: PUBLISHED Published: 2023-02-24T10:31:15.666Z Last Updated: 2025-03-11T15:50:04.228Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: DrayTek Products: Vigor 2960 Problem Types: CWE-22 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub_1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input /../etc/passwd- leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be u
path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221742 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221742 - https://vuldb.com/?ctiid.221742 - https://github.com/xxy1126/Vuln/blob/main/Draytek/1.md
CVE ID: CVE-2023-1010 State: PUBLISHED Published: 2023-02-24T10:34:20.736Z Last Updated: 2024-08-02T05:32:46.187Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: vox2png Problem Types: CWE-122 Description: A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221743. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
f this vulnerability is VDB-221743. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.221743 - https://vuldb.com/?ctiid.221743 - https://github.com/10cksYiqiyinHangzhouTechnology/vox2png/blob/main/README.md
CVE ID: CVE-2023-1011 State: PUBLISHED Published: 2023-05-08T13:58:06.876Z Last Updated: 2025-05-05T16:07:22.053Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-352 Cross-Site Request Forgery (CSRF), CWE-79 Cross-Site Scripting (XSS) Description: The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d1784446-b3da-4175-9dac-20b030f19984
CVE ID: CVE-2023-1013 State: PUBLISHED Published: 2023-03-30T08:14:06.747Z Last Updated: 2025-02-11T20:14:00.647Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Virames Products: Vira-Investing Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS).This issue affects Vira-Investing: before 1.0.84.86. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0183
CVE ID: CVE-2023-1014 State: PUBLISHED Published: 2023-03-30T08:17:03.971Z Last Updated: 2025-02-11T20:13:42.972Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Virames Products: Vira-Investing Problem Types: CWE-1320 Description: Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0183
CVE ID: CVE-2023-1015 State: REJECTED Published: N/A Last Updated: 2023-03-10T11:34:38.836Z Description: No description available.
CVE ID: CVE-2023-1016 State: PUBLISHED Published: 2023-06-09T05:33:36.074Z Last Updated: 2024-12-23T16:19:00.807Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: hijiri Products: Intuitive Custom Post Order Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.3, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of sufficient preparation in the 'update_options' function as well as the 'refresh' function which runs queries on the same
sufficient preparation in the 'update_options' function as well as the 'refresh' function which runs queries on the same values. This allows authenticated attackers, with administrator permissions, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note that this attack may only be practical on configurations where it is possible to bypass addslashes due to the database using a nonstandard character set such as GBK. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc878508-200d-4bc7-aa99-c34e63cba4b3?source=cve - h
erences: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc878508-200d-4bc7-aa99-c34e63cba4b3?source=cve - https://plugins.trac.wordpress.org/browser/intuitive-custom-post-order/trunk/intuitive-custom-post-order.php?rev=2530122
CVE ID: CVE-2023-1017 State: PUBLISHED Published: 2023-02-28T18:02:27.064Z Last Updated: 2025-11-04T19:14:38.421Z Vendors: Trusted Computing Group Products: TPM2.0 Problem Types: CWE-787 Out-of-bounds Write Description: An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context. Additional Analyst Notes: - CVE Program Container: References: - https://trustedcomputinggroup.org/wp-co
he TPM context. Additional Analyst Notes: - CVE Program Container: References: - https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf - https://trustedcomputinggroup.org/about/security/ - https://kb.cert.org/vuls/id/782720
CVE ID: CVE-2023-1018 State: PUBLISHED Published: 2023-02-28T17:54:33.260Z Last Updated: 2025-11-04T19:14:39.612Z Vendors: Trusted Computing Group Products: TPM2.0 Problem Types: CWE-125 Out-of-bounds Read Description: An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf - https://trustedcomputinggr
ences: - https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf - https://trustedcomputinggroup.org/about/security/ - https://kb.cert.org/vuls/id/782720
CVE ID: CVE-2023-1019 State: PUBLISHED Published: 2023-05-15T12:15:43.027Z Last Updated: 2025-01-24T21:15:37.255Z Vendors: Unknown Products: Help Desk WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a6331ca8-9603-4134-af39-8e77ac9d511c
CVE ID: CVE-2023-1020 State: PUBLISHED Published: 2023-04-24T18:30:51.463Z Last Updated: 2025-02-04T18:39:43.029Z Vendors: Unknown Products: Steveas WP Live Chat Shoutbox Problem Types: CWE-89 SQL Injection Description: The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4e5aa9a3-65a0-47d6-bc26-a2fb6cb073ff
CVE ID: CVE-2023-1021 State: PUBLISHED Published: 2023-05-02T07:04:51.880Z Last Updated: 2025-01-30T14:52:41.178Z Vendors: Unknown Products: amr ical events lists Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The amr ical events lists WordPress plugin through 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/91d04f96-11b2-46dc-860c-dc6c26360bf3
CVE ID: CVE-2023-1022 State: PUBLISHED Published: 2023-02-28T12:56:45.634Z Last Updated: 2025-01-13T17:03:10.281Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-862 Missing Authorization Description: The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on the wpmsGGSaveInformation function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to update google analytics options maintained by the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks
nalytics options maintained by the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/702f9d3b-5d33-4215-ac76-9aae3162d775 - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_ma
ess.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1023 State: PUBLISHED Published: 2023-02-28T12:56:21.973Z Last Updated: 2025-01-13T17:03:19.112Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-862 Missing Authorization Description: The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the saveSitemapSettings function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to change sitemap-related settings of the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a
temap-related settings of the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9d1e498a-ddcb-4c67-bf0d-bb45b6fe0e9d - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1024 State: PUBLISHED Published: 2023-02-28T12:56:00.579Z Last Updated: 2025-01-13T17:03:28.118Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-862 Missing Authorization Description: The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to generate sitemaps. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and tha
aps. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3f835e-0aa9-4581-9150-fe5041e0f293 - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1025 State: PUBLISHED Published: 2023-03-27T15:37:42.298Z Last Updated: 2025-02-26T21:05:54.904Z Vendors: Unknown Products: Simple File List Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/13621b13-8d31-4214-a665-cb15981f3ec1
CVE ID: CVE-2023-1026 State: PUBLISHED Published: 2023-02-28T12:55:23.092Z Last Updated: 2025-01-13T17:03:38.171Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-862 Missing Authorization Description: The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the listPostsCategory function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to get post listings by category as long as those posts are published. This vulnerability occurred as a result of the plugin relying on nonce
y category as long as those posts are published. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/978d5715-7993-4f89-8d69-895467633bfb - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&s
wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1027 State: PUBLISHED Published: 2023-02-28T12:54:59.252Z Last Updated: 2025-01-13T17:03:47.358Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-862 Missing Authorization Description: The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post categories. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access cont
post categories. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4f589e21-7417-4b43-b580-4f1d3c2041f4 - https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1028 State: PUBLISHED Published: 2023-02-28T12:53:47.123Z Last Updated: 2025-01-13T17:03:56.162Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: joomunited Products: WP Meta SEO Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the setIgnore function. This makes it possible for unauthenticated attackers to update plugin options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Ad