Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a8cdde8d-db43-4702-81c3-ea2d867baa8d?source=cve - https://plugins.trac.wordpress.org/browser/razorpay-subscription-button-elementor/tags/1.0.3/includes/rzp-payment-buttons.php#L78 - https://wordpress.org/plugins/razorpay-subscription-button-elementor/#developers
CVE ID: CVE-2024-13828 State: PUBLISHED Published: 2025-05-15T20:07:04.993Z Last Updated: 2025-05-20T19:25:47.559Z Vendors: Unknown Products: Badgearoo Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0f901807-9ef2-4cd3-969a-9fd23a8da371/
CVE ID: CVE-2024-13829 State: PUBLISHED Published: 2025-02-05T05:22:32.025Z Last Updated: 2025-02-05T15:21:53.122Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: tripetto Products: WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Problem Types: CWE-200 Description: The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 via the 'attachments.php' file. This makes it possible for unauthenticated attackers to extract sensitive data including files uploaded via forms. Additional Analyst Notes
ble for unauthenticated attackers to extract sensitive data including files uploaded via forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a938042-bad6-4fe0-8905-148d07a22996?source=cve - https://plugins.trac.wordpress.org/browser/tripetto/trunk/lib/attachments.php - https://plugins.trac.wordpress.org/changeset/3231968/
CVE ID: CVE-2024-13830 State: PUBLISHED Published: 2025-02-11T15:22:15.945Z Last Updated: 2025-02-11T15:35:20.726Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-79 Description: Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client
/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-13831 State: PUBLISHED Published: 2025-02-28T08:23:17.051Z Last Updated: 2025-02-28T13:24:00.920Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: wpbranch Products: Tabs for WooCommerce Problem Types: CWE-502 Description: The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'product_has_custom_tabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impac
ject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/790a2c64-b358-41ed-be17-f2b99d294617?source=cve - https://plugins.trac.wordpress.org/browser/wc-tabs/trunk/wc-tabs-lite.php#L363
CVE ID: CVE-2024-13832 State: PUBLISHED Published: 2025-02-28T08:23:14.655Z Last Updated: 2025-02-28T13:50:37.744Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: uncodethemes Products: Ultra Addons Lite for Elementor Problem Types: CWE-639 Description: The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should
h Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/476883a8-c258-477b-99d3-f35423d7a312?source=cve - https://plugins.trac.wordpress.org/browser/ut-elementor-addons-lite/trunk/includes/queries.php#L506
CVE ID: CVE-2024-13833 State: PUBLISHED Published: 2025-03-01T11:22:48.683Z Last Updated: 2025-03-03T20:55:53.414Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: awordpresslife Products: Album Gallery – WordPress Gallery Problem Types: CWE-502 Description: The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no imp
inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cc7075a6-5609-42ab-a4cb-9d33686c7de0?source=cve - https://plugins.trac.wordpress.org/changeset/3246291/new-album-gallery
CVE ID: CVE-2024-13834 State: PUBLISHED Published: 2025-02-15T14:21:22.372Z Last Updated: 2025-02-18T19:35:46.616Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: cyberchimps Products: Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. Problem Types: CWE-918 Description: The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.4 via the 'remote_request' function. This makes it possible for authenticated attackers, with contributor-level access and above, to
emote_request' function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b2833265-f1e5-4cfd-ad2f-ca28a59de82f?source=cve - https://plugins.trac.wordpress.org/changeset/3240422/responsive-add-ons
CVE ID: CVE-2024-13835 State: PUBLISHED Published: 2025-03-08T02:24:04.227Z Last Updated: 2025-03-10T16:01:16.741Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: gandhihitesh9 Products: Post Meta Data Manager Problem Types: CWE-269 Description: The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying the existence of a multisite installation prior to allowing user meta to be added/modified. This makes it possible for authenticated attackers, with Administrator-level access and above, to gain elevated privileges on subsites that
le for authenticated attackers, with Administrator-level access and above, to gain elevated privileges on subsites that would otherwise be inaccessible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/568aa6d6-10a1-4653-ab95-845faf005b8e?source=cve - https://wordpress.org/plugins/post-meta-data-manager/
CVE ID: CVE-2024-13836 State: PUBLISHED Published: 2025-03-11T06:00:10.596Z Last Updated: 2025-03-11T14:33:44.335Z Vendors: Unknown Products: WP Login Control Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/26c2026a-1490-4a0f-9d1d-54ee43c69f22/
CVE ID: CVE-2024-13837 State: REJECTED Published: N/A Last Updated: 2025-02-17T19:00:28.324Z Description: No description available.
CVE ID: CVE-2024-13838 State: PUBLISHED Published: 2025-03-12T07:00:22.022Z Last Updated: 2025-03-12T13:15:33.295Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: uncannyowl Products: Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin Problem Types: CWE-918 Description: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.2 via the 'call_webhook' method of the Automator_Send_Webhook class This makes it possible for authenticated attackers, with Administrator-level access and above, to
or_Send_Webhook class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/29eeac86-6b33-49e6-a7e1-c80dee383d6f?source=cve - https://plugins.trac.wordpress.org/changeset/3249921/uncanny-automator/trunk/src/core/lib/webhooks/class-automator-send-webhook.php
CVE ID: CVE-2024-13839 State: PUBLISHED Published: 2025-03-05T09:21:47.525Z Last Updated: 2025-03-05T14:21:57.377Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: richardgabriel Products: Staff Directory Plugin: Company Directory Problem Types: CWE-79 Description: The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action
s to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/80203516-8546-441a-b51d-2d09968492b5?source=cve - https://plugins.trac.wordpress.org/browser/staff-directory-pro/trunk/include/tgmpa/init.php#L99 - https://wordpress.org/plugins/staff-directory-pro/#developers
CVE ID: CVE-2024-13841 State: PUBLISHED Published: 2025-02-07T06:59:57.552Z Last Updated: 2025-02-07T15:58:00.999Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: daveshine Products: Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time Problem Types: CWE-639 Description: The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level acces
ictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private and draft posts created with Elementor that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/642dc1d3-a008-4af8-ba9e-dbdd37b93126?source=cve - https://plugins.trac.wordpress.org/browser/builder-shortcode-extras/tags/1.0.0/includes/shortcodes/elementor.php#L116
CVE ID: CVE-2024-13842 State: PUBLISHED Published: 2025-02-11T15:25:49.528Z Last Updated: 2025-02-11T16:00:24.402Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-321 Description: A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple
ruary-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-13843 State: PUBLISHED Published: 2025-02-11T15:26:32.029Z Last Updated: 2025-02-11T16:00:53.016Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-312 Description: Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Cli
com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-13844 State: PUBLISHED Published: 2025-03-08T05:30:08.283Z Last Updated: 2025-05-12T15:32:37.834Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: saadiqbal Products: Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more Problem Types: CWE-89 Description: The Post SMTP plugin for WordPress is vulnerable to generic SQL Injection via the ‘columns’ parameter in all versions up to, and including, 3.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authent
user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0540f70d-009a-4776-8717-f096e30a11d3?source=cve - https://gist.github.com/nhienit2010/d4692062f54b89e16aa068a0ef142cf6#file-postmanemailquerylog-php-L314 - https://wordpress.org/plugins/post-smtp/#developers - https://plugins.trac.wordpress.org/changeset/3249371/
CVE ID: CVE-2024-13845 State: PUBLISHED Published: 2025-05-01T04:22:57.183Z Last Updated: 2025-05-01T13:18:53.896Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Gravity Forms Products: Gravity Forms WebHooks Problem Types: CWE-918 Description: The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from
equests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9311b20b-daad-408f-a1a0-d1e42573ab97?source=cve - https://www.gravityforms.com/blog/brand-new-release-webhooks-add-on-1-7/
CVE ID: CVE-2024-13846 State: PUBLISHED Published: 2025-02-21T11:09:35.235Z Last Updated: 2025-02-21T13:20:21.585Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: azzaroco Products: Indeed Ultimate Learning Pro Problem Types: CWE-89 Description: The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into
t possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e9ccd2cc-ee5e-40e3-905d-21884ec01f72?source=cve - https://codecanyon.net/item/ultimate-learning-pro-wordpress-plugin/21772657
CVE ID: CVE-2024-13847 State: REJECTED Published: 2025-03-15T03:23:22.535Z Last Updated: 2025-05-09T17:33:11.742Z Description: No description available.
CVE ID: CVE-2024-13848 State: PUBLISHED Published: 2025-02-18T04:21:18.678Z Last Updated: 2025-02-18T15:42:12.504Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: jakob42 Products: Reaction Buttons Problem Types: CWE-79 Description: The Reaction Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects mul
inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9f5a77d1-b575-4e7c-bf27-fc78260de302?source=cve - https://wordpress.org/plugins/reaction-buttons/#developers
CVE ID: CVE-2024-13849 State: PUBLISHED Published: 2025-02-20T09:21:36.947Z Last Updated: 2025-02-20T14:23:26.572Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: dcurasi Products: Cookie Notice Bar Problem Types: CWE-79 Description: The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and instal
pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/24bdffdc-1a4d-4a1c-8393-cf89f0a63bf9?source=cve - https://plugins.trac.wordpress.org/browser/cookie-notice-bar/tags/1.3.0/admin/partials/dc-cookie-notice-bar-admin-display.php - https://wordpress.org/plugins/cookie-notice-bar/#developers
CVE ID: CVE-2024-13850 State: PUBLISHED Published: 2025-02-08T12:21:37.492Z Last Updated: 2025-02-12T20:51:42.538Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: ramon-fincken Products: Simple add pages or posts Problem Types: CWE-79 Description: The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site in
itrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/65a3604d-eb6b-484f-834a-b3d75fe3bda7?source=cve - https://plugins.trac.wordpress.org/browser/simple-add-pages-or-posts/tags/2.0.0/form.php - https://wordpress.org/plugins/simple-add-pages-or-posts/#developers
CVE ID: CVE-2024-13851 State: PUBLISHED Published: 2025-02-28T08:23:18.930Z Last Updated: 2025-02-28T14:46:20.976Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: evigeo Products: Modal Portfolio Problem Types: CWE-79 Description: The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and
pts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc049cab-6793-4656-9b17-8ca64c566c4c?source=cve - https://wordpress.org/plugins/modal-portfolio/#developers