Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-44857 State: PUBLISHED Published: 2024-04-12T00:00:00 Last Updated: 2024-08-02T20:07:33.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_21D24 function in the acu_web component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pine-amphibian-9b9.notion.site/SAILOR-Ku-Software-RCE-and-Privilege-Escalation-Statistics-report-b8e953249468429d9f60b89ff653847a
CVE ID: CVE-2023-44860 State: PUBLISHED Published: 2023-10-06T00:00:00 Last Updated: 2024-09-19T16:21:22.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/Improper%20Authentication%20Mechanism%20Leading%20to%20Denial-of-Service%20%28DoS%29.md
CVE ID: CVE-2023-44915 State: PUBLISHED Published: 2025-06-25T00:00:00.000Z Last Updated: 2025-06-25T17:53:24.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login_error parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://c3crm.com - https://github.com/dfar2008/c3crm - https://github.com/dfar2008/c3crm/tree/master/Login.php#L108 - https://github.com/timosarkar/vulnerabilities/tree/main/CVE-2023-44915
CVE ID: CVE-2023-44954 State: PUBLISHED Published: 2023-11-01T00:00:00 Last Updated: 2024-09-05T19:36:06.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bigtreecms.org/download/core/ - https://github.com/Ciber-Mike/BigTree_CMS-Stored_XSS-Developer_Settings/blob/main/README.md
CVE ID: CVE-2023-44959 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-18T20:02:43.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FzBacon/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection/blob/master/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection.md#cve-2023-27216_d-link_dsl-3782_router_command_injection
CVE ID: CVE-2023-44961 State: PUBLISHED Published: 2023-10-11T00:00:00 Last Updated: 2024-09-18T16:08:25.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ggb0n/CVE-2023-44961
CVE ID: CVE-2023-44962 State: PUBLISHED Published: 2023-10-11T00:00:00 Last Updated: 2024-09-18T16:06:41.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ggb0n/CVE-2023-44962
CVE ID: CVE-2023-44973 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T15:43:01.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yangliukk/emlog/blob/main/Template-getshell.md
CVE ID: CVE-2023-44974 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-23T13:33:48.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yangliukk/emlog/blob/main/Plugin-getshell.md
CVE ID: CVE-2023-44976 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-01T14:28:01.549Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L) Vendors: Hangzhou Shunwang Products: Rentdrv2 Problem Types: CWE-782 Description: Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/keowu/BadRentdrv2 - https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/
CVE ID: CVE-2023-44981 State: PUBLISHED Published: 2023-10-11T11:55:47.925Z Last Updated: 2025-04-23T16:15:15.138Z Vendors: Apache Software Foundation Products: Apache ZooKeeper Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The instance part in SASL auth ID is optional and if it's missing, like 'eve@EXAMPLE.COM', the authorization check will be skipped. As a result an arbitrary endpoint could join the cluster a
e 'eve@EXAMPLE.COM', the authorization check will be skipped. As a result an arbitrary endpoint could join the cluster and begin propagating counterfeit changes to the leader, essentially giving it complete read-write access to the data tree. Quorum Peer authentication is not enabled by default. Users are recommended to upgrade to version 3.9.1, 3.8.3, 3.7.2, which fixes the issue. Alternately ensure the ensemble election/quorum communication is protected by a firewall as this will mitigate the issue. See the documentation for more details on correct cluster administration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thre
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/wf0yrk84dg1942z1o74kd8nycg6pgm5b - http://www.openwall.com/lists/oss-security/2023/10/11/4 - https://lists.debian.org/debian-lts-announce/2023/10/msg00029.html - https://www.debian.org/security/2023/dsa-5544 - https://security.netapp.com/advisory/ntap-20240621-0007/
CVE ID: CVE-2023-44982 State: PUBLISHED Published: 2023-12-19T00:03:30.190Z Last Updated: 2024-08-02T20:07:33.487Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Jordy Meow Products: Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina) Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina).This issue affects Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina): from n/a through 6.4.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-retina
Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-retina-2x/wordpress-wp-retina-2x-plugin-6-4-5-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-44983 State: PUBLISHED Published: 2023-12-19T15:29:33.268Z Last Updated: 2024-08-02T20:07:33.598Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Aruba.it Products: Aruba HiSpeed Cache Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/aruba-hispeed-cache/wordpress-aruba-hispeed-cache-plugin-2-0-6-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-44984 State: PUBLISHED Published: 2023-10-16T10:41:37.562Z Last Updated: 2024-09-13T19:38:42.683Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Robin Wilson Products: bbp style pack Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.6.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bbp-style-pack/wordpress-bbp-style-pack-plugin-5-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44985 State: PUBLISHED Published: 2023-10-16T10:46:45.179Z Last Updated: 2024-09-16T14:37:39.004Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Cytech Products: BuddyMeet Problem Types: CWE-79 Description: Auth. (contributo+) Stored Cross-Site Scripting (XSS) vulnerability in Cytech BuddyMeet plugin <= 2.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/buddymeet/wordpress-buddymeet-plugin-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44986 State: PUBLISHED Published: 2023-10-16T10:50:01.421Z Last Updated: 2024-09-16T14:35:11.333Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Tyche Softwares Products: Abandoned Cart Lite for WooCommerce Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin <= 5.15.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-abandoned-cart/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-15-2-cross-site-scripting-xss-vulnerability
mmerce-abandoned-cart/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44987 State: PUBLISHED Published: 2023-10-16T11:01:17.432Z Last Updated: 2024-09-13T19:38:26.074Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Timely - Appointment software Products: Timely Booking Button Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button plugin <= 2.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/timely-booking-button/wordpress-timely-booking-button-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44988 State: PUBLISHED Published: 2025-01-02T11:59:46.731Z Last Updated: 2025-01-06T20:31:13.579Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Martin Gibson Products: WP Custom Admin Interface Problem Types: CWE-862 Description: Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-custom-admin-interface/vulnerability/wordpress-wp-custom-admin-interface-plugin-
hstack.com/database/wordpress/plugin/wp-custom-admin-interface/vulnerability/wordpress-wp-custom-admin-interface-plugin-7-32-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44989 State: PUBLISHED Published: 2024-03-26T17:20:37.168Z Last Updated: 2024-08-06T15:18:39.759Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GSheetConnector Products: CF7 Google Sheets Connector Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue affects CF7 Google Sheets Connector: from n/a through 5.0.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cf7-google-sheets-connector/wordpress-cf7-google-sheets-connector-plugin-5-0-5-sensitive-data-exp
database/vulnerability/cf7-google-sheets-connector/wordpress-cf7-google-sheets-connector-plugin-5-0-5-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve
CVE ID: CVE-2023-44990 State: PUBLISHED Published: 2023-10-17T09:01:36.865Z Last Updated: 2024-08-02T20:07:33.551Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: realmag777 Products: WOLF – WordPress Posts Bulk Editor and Manager Professional Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-plugin-1-0-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44991 State: PUBLISHED Published: 2023-12-19T15:34:19.591Z Last Updated: 2024-08-02T20:07:33.597Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Jordy Meow Products: Media File Renamer: Rename Files (Manual, Auto & AI) Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files (Manual, Auto & AI).This issue affects Media File Renamer: Rename Files (Manual, Auto & AI): from n/a through 5.6.9. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renam
ram Container: References: - https://patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renamer-plugin-5-6-9-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve
CVE ID: CVE-2023-44993 State: PUBLISHED Published: 2023-10-09T10:11:26.641Z Last Updated: 2024-09-19T14:02:27.104Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: QuantumCloud Products: AI ChatBot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/chatbot/wordpress-ai-chatbot-plugin-4-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44994 State: PUBLISHED Published: 2023-10-10T14:31:06.843Z Last Updated: 2024-09-18T16:04:10.633Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bainternet Products: ShortCodes UI Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcodes-ui/wordpress-shortcodes-ui-plugin-1-9-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44995 State: PUBLISHED Published: 2023-10-10T15:46:48.770Z Last Updated: 2024-09-18T16:00:12.147Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WP Doctor Products: WooCommerce Login Redirect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Doctor WooCommerce Login Redirect plugin <= 2.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-login-redirect/wordpress-woocommerce-login-redirect-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44996 State: PUBLISHED Published: 2023-10-10T15:50:17.715Z Last Updated: 2024-09-18T15:55:25.116Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Naresh Parmar Products: Post View Count Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Naresh Parmar Post View Count plugin <= 1.8.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-simple-post-view/wordpress-post-view-count-plugin-1-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44997 State: PUBLISHED Published: 2023-10-11T07:57:45.140Z Last Updated: 2024-09-17T17:49:41.294Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Nitin Rathod Products: WP Forms Puzzle Captcha Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin <= 4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-forms-puzzle-captcha/wordpress-wp-forms-puzzle-captcha-plugin-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44998 State: PUBLISHED Published: 2023-10-12T12:10:05.270Z Last Updated: 2024-09-17T13:29:46.802Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Products: Category Meta plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin <= 1.2.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-category-meta/wordpress-category-meta-p
ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-category-meta/wordpress-category-meta-plugin-1-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44999 State: PUBLISHED Published: 2024-03-27T13:27:46.498Z Last Updated: 2024-08-02T20:14:18.245Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WooCommerce Products: WooCommerce Stripe Payment Gateway Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-gateway-plugin-7-6-0-cross-site-request-f
database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-gateway-plugin-7-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45000 State: PUBLISHED Published: 2024-04-16T17:51:08.717Z Last Updated: 2024-08-02T20:14:18.252Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: LiteSpeed Technologies Products: LiteSpeed Cache Problem Types: CWE-862 Description: Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-broken-access-control-on-api-vulnerability?_s_id=cve
CVE ID: CVE-2023-45001 State: PUBLISHED Published: 2023-11-06T08:20:44.318Z Last Updated: 2024-09-05T15:42:57.767Z Vendors: Castos Products: Seriously Simple Stats Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seriously-simple-stats/wordpress-seriously-simple-stats-plugin-1-5-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-45002 State: PUBLISHED Published: 2025-01-02T11:59:47.346Z Last Updated: 2025-01-06T20:30:49.908Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: weDevs Products: WP User Frontend Problem Types: CWE-862 Description: Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 3.6.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-user-frontend/vulnerability/wordpress-wp-user-frontend-plugin-3-6-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-45003 State: PUBLISHED Published: 2023-10-17T10:59:23.366Z Last Updated: 2024-09-13T16:28:07.187Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Arrow Plugins Products: Social Feed | Custom Feed for Social Media Networks Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin <= 2.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-social-feed/wordpress-social-feed-plugin-2-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id
e/vulnerability/wp-social-feed/wordpress-social-feed-plugin-2-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45004 State: PUBLISHED Published: 2023-10-17T11:05:54.452Z Last Updated: 2024-09-13T18:04:44.394Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wp3sixty Products: Woo Custom Emails Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wp3sixty Woo Custom Emails plugin <= 2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-custom-emails/wordpress-woo-custom-emails-plugin-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45005 State: PUBLISHED Published: 2023-10-17T09:05:23.248Z Last Updated: 2024-09-13T15:55:38.777Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Castos Products: Seriously Simple Stats Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Castos Seriously Simple Stats plugin <= 1.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seriously-simple-stats/wordpress-seriously-simple-stats-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve