Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9631 State: PUBLISHED Published: 2025-02-05T10:30:51.252Z Last Updated: 2025-02-05T19:26:24.166Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-407 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480867 - https://hackerone.com/reports/2650086
CVE ID: CVE-2024-9632 State: PUBLISHED Published: 2024-10-30T07:42:35.320Z Last Updated: 2025-11-20T07:35:04.792Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical U
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-122 Description: A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCo
Types: CWE-122 Description: A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:10090 - https://access.redhat.com/errata/RHSA-2024:8798 - https://access.redhat.com/errata/RHSA-2024:9540 - https://access.redhat.com/errata/RHSA-2024:9579 - https://access.redhat.com/errata/RHSA-2024:9601 - h
a/RHSA-2024:9540 - https://access.redhat.com/errata/RHSA-2024:9579 - https://access.redhat.com/errata/RHSA-2024:9601 - https://access.redhat.com/errata/RHSA-2024:9690 - https://access.redhat.com/errata/RHSA-2024:9816 - https://access.redhat.com/errata/RHSA-2024:9818 - https://access.redhat.com/errata/RHSA-2024:9819 - https://access.redhat.com/errata/RHSA-2024:9820 - https://access.redhat.com/errata/RHSA-2024:9901 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2024-9632 - https://bugzilla.redhat.c
cess.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2024-9632 - https://bugzilla.redhat.com/show_bug.cgi?id=2317233
CVE ID: CVE-2024-9633 State: PUBLISHED Published: 2024-11-14T13:30:57.385Z Last Updated: 2024-12-06T10:34:30.828Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-708 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from 17.6 before 17.6.2. This issue allows an attacker to create a group with a name matching an existing unique Pages domain, potentially leading to domain confusion attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitla
confusion attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/498257 - https://hackerone.com/reports/2759470
CVE ID: CVE-2024-9634 State: PUBLISHED Published: 2024-10-16T02:05:09.208Z Last Updated: 2024-10-16T16:36:55.440Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: webdevmattcrom Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-502 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the give_company_name parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code
icated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e?source=cve - https://plugins.trac.wordpress.org/browser/give/tags/3.16.2/src/Donations/Repositories/DonationRepository.php?rev=3157829 - https://plugins.trac.wordpress.org/changeset/3166836/give/tags/3.16.4/includes/process-donation.php
CVE ID: CVE-2024-9635 State: PUBLISHED Published: 2024-11-23T06:54:54.142Z Last Updated: 2024-11-23T13:18:20.004Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: theafricanboss Products: Checkout with Cash App on WooCommerce Problem Types: CWE-79 Description: The Checkout with Cash App on WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wp_http_referer' parameter in several files in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick
sible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/770d1b3f-45f1-40f6-80b7-808c633d2be7?source=cve - https://plugins.trac.wordpress.org/browser/wc-cashapp/trunk/includes/class-wc_cashapp_square.php#L66 - https://plugins.trac.wordpress.org/browser/wc-cashapp/trunk/includes/class-wc_cashapp_square.php#L128 - https://plugins.trac.wordpress.org/browser/wc-cashapp/trunk/includes/class-wc_cashapp_square.php#L153 - https://plugins.trac.wordpress.org
ac.wordpress.org/browser/wc-cashapp/trunk/includes/class-wc_cashapp_square.php#L153 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3194770%40wc-cashapp&new=3194770%40wc-cashapp&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9636 State: PUBLISHED Published: 2025-01-15T09:25:53.837Z Last Updated: 2025-01-15T14:40:55.552Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: pickplugins Products: Post Grid and Gutenberg Blocks – ComboBlocks Problem Types: CWE-269 Description: The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to 2.3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ackers to register on the site as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1bbe01b8-24ed-4e1e-bafc-0f4dea96c1f3?source=cve - https://plugins.trac.wordpress.org/browser/post-grid/tags/2.2.93/includes/blocks/form-wrap/functions.php#L3200 - https://plugins.trac.wordpress.org/changeset/3117675/post-grid/trunk/includes/blocks/form-wrap/functions.php - https://plugins.trac.wordpress.org/changeset/3221012/post-grid/trunk/includes/blocks/form-wrap/functions.php
CVE ID: CVE-2024-9637 State: PUBLISHED Published: 2024-10-26T08:36:00.481Z Last Updated: 2024-10-28T19:23:08.421Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: jdsofttech Products: School Management System – WPSchoolPress Problem Types: CWE-639 Description: The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.10. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with teacher-level access and above, to change arbitrary user's email add
makes it possible for authenticated attackers, with teacher-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/411693fc-9df3-44b1-9a6f-58a6e8ef23b8?source=cve - https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.9/lib/wpsp-ajaxworks-teacher.php#L598
CVE ID: CVE-2024-9638 State: PUBLISHED Published: 2025-01-07T06:00:06.592Z Last Updated: 2025-01-07T15:13:44.110Z Vendors: Unknown Products: Category Posts Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Category Posts Widget WordPress plugin before 4.9.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/119d5249-48e4-429e-8a1d-ad112e0c966d/
CVE ID: CVE-2024-9639 State: PUBLISHED Published: 2025-05-22T17:27:58.703Z Last Updated: 2025-05-22T17:57:21.991Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-94 Description: Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Acti
CVE ID: CVE-2024-9641 State: PUBLISHED Published: 2024-12-12T06:00:19.198Z Last Updated: 2024-12-12T17:21:52.245Z Vendors: Unknown Products: LuckyWP Table of Contents Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The LuckyWP Table of Contents WordPress plugin before 2.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/81aa922a-3b51-4cfe-9098-53234827610c/
CVE ID: CVE-2024-9642 State: PUBLISHED Published: 2024-10-26T08:36:02.397Z Last Updated: 2024-10-28T19:50:18.223Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rock4temps Products: Editor Custom Color Palette Problem Types: CWE-79 Description: The Editor Custom Color Palette plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional
and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e7f858c-945c-4d12-a2a6-113449ad890a?source=cve - https://wordpress.org/plugins/editor-custom-color-palette/#developers - https://plugins.trac.wordpress.org/browser/editor-custom-color-palette/tags/3.3.6/asset/eccp-custom-back-office.php#L1685
CVE ID: CVE-2024-9643 State: PUBLISHED Published: 2025-02-04T14:47:40.214Z Last Updated: 2025-11-22T01:43:40.757Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Four-Faith Products: F3x36 Problem Types: CWE-489, CWE-798 Description: The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/four-faith-hard-coded-creds -
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/four-faith-hard-coded-creds - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1752
CVE ID: CVE-2024-9644 State: PUBLISHED Published: 2025-02-04T14:58:03.363Z Last Updated: 2025-11-19T20:35:28.936Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Four-Faith Products: F3x36 Problem Types: CWE-489, CWE-306 Description: The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote and unauthenticated can use this vulnerability to modify settings or chain with existing authenticated vulnerabilities. Additional A
ticated can use this vulnerability to modify settings or chain with existing authenticated vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/four-faith-hidden-api
CVE ID: CVE-2024-9645 State: PUBLISHED Published: 2025-05-15T20:07:21.874Z Last Updated: 2025-05-16T20:36:19.623Z Vendors: Unknown Products: Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry WordPress plugin before 2.2.93 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerabilit
Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cfd6db83-5e7f-4631-87c3-fdcd4c64c4fe/
CVE ID: CVE-2024-9647 State: PUBLISHED Published: 2024-10-16T02:05:08.087Z Last Updated: 2024-10-16T16:20:32.238Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tkama Products: Kama SpamBlock Problem Types: CWE-79 Description: The Kama SpamBlock plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST values in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - C
f they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7f2d3acb-5931-4629-8f03-4ab40fadf7c7?source=cve - https://plugins.trac.wordpress.org/browser/kama-spamblock/tags/1.8.2/Kama_Spamblock.php#L106 - https://plugins.trac.wordpress.org/changeset/3167874/kama-spamblock/tags/1.8.3/Kama_Spamblock.php
CVE ID: CVE-2024-9648 State: PUBLISHED Published: 2025-08-28T03:42:44.577Z Last Updated: 2025-08-28T14:49:18.866Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WP Ulike Products: WP ULike Pro Problem Types: CWE-434 Description: The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up to, and including, 1.9.3. This makes it possible for unauthenticated attackers to upload limited arbitrary files like .php2, .php6, .php7, .phps, .pht, .phtm, .pgif, .shtml, .phar, .inc, .hphp, .ctp, .module, .html, .svg on the affected site's server which m
.phps, .pht, .phtm, .pgif, .shtml, .phar, .inc, .hphp, .ctp, .module, .html, .svg on the affected site's server which may make make other attacks like Cross-Site Scripting possible. Only versions up to 1.8.7 were confirmed vulnerable, however, the earliest tested version for a patch we have access to is 1.9.4, so we are considering 1.9.4 the patched version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9b86d9ea-b842-4492-82e4-dd979fbe70cf?source=cve - https://wpulike.com/
CVE ID: CVE-2024-9649 State: PUBLISHED Published: 2024-10-16T02:05:04.166Z Last Updated: 2024-10-16T13:36:08.613Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: alimir Products: WP ULike – All-in-One Engagement Toolkit Problem Types: CWE-352 Description: The WP ULike – The Ultimate Engagement Toolkit for Websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7.4. This is due to missing or incorrect nonce validation on the wp_ulike_delete_history_api() function. This makes it possible for unauthenticated attackers to delete engagements via a forged request granted they can trick a site administrator
le for unauthenticated attackers to delete engagements via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3fcb35f8-ed88-4440-8cdf-95c1f0028253?source=cve - https://github.com/WordpressPluginDirectory/wp-ulike/blob/fd5eb54948cc1af9c348530a3cbd89c5a4bc68d0/wp-ulike/admin/admin-ajax.php#L78-L100 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3168233%40wp-ulike&new=3168233%40wp-ulike&sfp_email=&sfph_mail=#file0
CVE ID: CVE-2024-9650 State: PUBLISHED Published: 2024-10-24T11:03:15.623Z Last Updated: 2024-10-24T19:20:24.941Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: brechtvds Products: WP Recipe Maker Problem Types: CWE-79 Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip’ parameter in all versions up to, and including, 9.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst N
inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/085d06e1-31d3-4c01-8d8e-588c04b79ae3?source=cve - https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/assets/js/public/tooltip.js#L32 - https://plugins.trac.wordpress.org/changeset/3173494/
CVE ID: CVE-2024-9651 State: PUBLISHED Published: 2024-12-09T06:00:05.625Z Last Updated: 2024-12-09T17:53:31.752Z Vendors: Unknown Products: Fluent Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a2c56e42-3b3a-4e23-933f-40cf63e222c0/
CVE ID: CVE-2024-9652 State: PUBLISHED Published: 2024-10-16T02:05:06.634Z Last Updated: 2024-10-16T13:30:29.787Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: plainware Products: Locatoraid Store Locator Problem Types: CWE-79 Description: The Locatoraid Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST keys in all versions up to, and including, 3.9.47 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additi
in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7821b17a-7da7-434f-8e3f-540e7d7cf6bb?source=cve - https://plugins.trac.wordpress.org/browser/locatoraid/trunk/happ2/modules/input/lib.php#L705 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3167512%40locatoraid&new=3167512%40locatoraid&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9653 State: PUBLISHED Published: 2024-11-20T05:32:28.023Z Last Updated: 2024-11-20T19:17:07.366Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: gloriafood Products: Restaurant Menu – Food Ordering System – Table Reservation Problem Types: CWE-79 Description: The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can success
akes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/11ccafd9-dad5-4b7d-b913-7821dd52d12b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3186456%40menu-ordering-reservations&new=3186456%40menu-ordering-reservations&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9654 State: PUBLISHED Published: 2024-12-17T11:10:18.973Z Last Updated: 2024-12-17T17:29:09.742Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: smub Products: Easy Digital Downloads – eCommerce Payments and Subscriptions made easy Problem Types: CWE-863 Description: The Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in versions 3.1 through 3.3.4. This is due to a lack of sufficient validation checks within the 'verify_guest_email' function to ensure the requesting user is the intended recipient of the purchase receipt. This makes it possible for unauthenticated attackers to bypass intended security restrict