Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6292 State: PUBLISHED Published: 2024-06-24T21:46:54.959Z Last Updated: 2025-02-13T17:54:43.015Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/342545100 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65
issues/342545100 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65HWXYSYMH55VDO6N36EOZFUNL4O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHV5WTU27YOIBIM2CON42SHWY6J2HPRS/
CVE ID: CVE-2024-6293 State: PUBLISHED Published: 2024-06-24T21:46:55.405Z Last Updated: 2025-02-13T17:57:58.695Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html - https://issues.chromium.org/issues/345993680 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65
issues/345993680 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65HWXYSYMH55VDO6N36EOZFUNL4O/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHV5WTU27YOIBIM2CON42SHWY6J2HPRS/
CVE ID: CVE-2024-6294 State: PUBLISHED Published: 2024-06-25T01:58:06.876Z Last Updated: 2024-08-01T21:33:05.316Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: udn Products: udn News App Problem Types: CWE-200 Description: udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7892-aafd2-1.html - https://www.twcert.org.tw/en/cp-139-78
Container: References: - https://www.twcert.org.tw/tw/cp-132-7892-aafd2-1.html - https://www.twcert.org.tw/en/cp-139-7893-43ecd-2.html
CVE ID: CVE-2024-6295 State: PUBLISHED Published: 2024-06-25T02:13:44.379Z Last Updated: 2024-08-01T21:33:05.390Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: udn Products: udn News App Problem Types: CWE-922 Description: udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7894-aebd8-1.html - https://www
Vulnrichment: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7894-aebd8-1.html - https://www.twcert.org.tw/en/cp-139-7895-80dac-2.html
CVE ID: CVE-2024-6296 State: PUBLISHED Published: 2024-06-28T03:36:42.693Z Last Updated: 2024-08-01T21:33:05.339Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bfintal Products: Stackable – Page Builder Gutenberg Blocks Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all versions up to, and including, 3.13.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level
cient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e55742de-9eaf-48e4-8d5d-ea980dfa17cf?source=cve - https://plugins.trac.wordpress.org/browser/stackable-ultimate-gutenberg-blocks/trunk/dist/frontend_image_lightbox.js - https://plugins.trac.wordpress.org/changeset/3108514/
CVE ID: CVE-2024-6297 State: PUBLISHED Published: 2024-06-25T03:30:37.970Z Last Updated: 2024-08-01T21:33:05.337Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: warfareplugins, themerex, stuartobrien, pedrogusmao02, blazeretail Products: Social Sharing Plugin – Social Warfare, Contact Form 7 Multi-Step Addon, Simply Show Hooks, Wrapper Link Elementor, BLAZE Retail Widget Problem Types: CWE-506 Embedded Malicious Code Description: Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates databa
ripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator users and send that data back to a server. Currently, not all plugins have been patched and we strongly recommend uninstalling the plugins for the time being and running a complete malware scan. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/56d24bc8-4a1a-4e60-aec5-960703a6058a?source=cve - https://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/ - https://plugins.trac.wordpress.org
https://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/ - https://plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.6.4/trunk/social-warfare.php#L54 - https://plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.6.4/trunk/social-warfare.php#L583 - https://plugins.trac.wordpress.org/changeset/3105893/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3106042%40social-warfare&new=3106042%40social-warfare&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/simply-show-hooks/trunk/index.php - https://plugins.trac.wordpress.org/browser/contact-form-7-multi-step-addon/trunk/trx-contact-form-7-multi-step-addo
hp - https://plugins.trac.wordpress.org/browser/contact-form-7-multi-step-addon/trunk/trx-contact-form-7-multi-step-addon.php - https://plugins.trac.wordpress.org/browser/wrapper-link-elementor/trunk/wrapper.php?rev=3106508 - https://plugins.trac.wordpress.org/browser/blaze-widget/trunk/blaze_widget.php
CVE ID: CVE-2024-6298 State: PUBLISHED Published: 2024-07-05T11:06:35.066Z Last Updated: 2024-12-05T12:16:19.488Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-1287 Description: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-6299 State: PUBLISHED Published: 2024-06-25T13:02:25.979Z Last Updated: 2024-08-29T15:04:59.770Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: The Conduit Contributors Products: Conduit Problem Types: CWE-324 Description: Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/famedly/conduit/-/releases/v0.8.0 - https://conduit.rs/changelog/#v0-8-0-2024-06-12
CVE ID: CVE-2024-6300 State: PUBLISHED Published: 2024-06-25T13:02:01.082Z Last Updated: 2024-08-29T15:04:59.860Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: The Conduit Contributors Products: Conduit Problem Types: CWE-459 Description: Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/famedly/conduit/-/releases/v0.8.0 - https://conduit.rs/changelog/#v0-8-0-2024-06-12
CVE ID: CVE-2024-6301 State: PUBLISHED Published: 2024-06-25T13:02:20.904Z Last Updated: 2024-08-29T15:04:59.937Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: The Conduit Contributors Products: Conduit Problem Types: CWE-346 Description: Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/famedly/conduit/-/releases/v0.8.0 - https://conduit.rs/changelog/#v0-8-0-2024-06-12
CVE ID: CVE-2024-6302 State: PUBLISHED Published: 2024-06-25T13:02:10.915Z Last Updated: 2024-09-17T18:00:30.094Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: The Conduit Contributors Products: Conduit Problem Types: CWE-280 Description: Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/famedly/conduit/-/releases/v0.7.0 - https://conduit.rs/changelog/#v0-7-0-2024-04-25
CVE ID: CVE-2024-6303 State: PUBLISHED Published: 2024-06-25T13:02:05.982Z Last Updated: 2024-08-29T15:05:00.177Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: The Conduit Contributors Products: Conduit Problem Types: CWE-862 Description: Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege escalation by moving the #admins alias to a room which they control, allowing them to run commands resetting passwords, siging json with the server's key, deactivating users, and more Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
ver's key, deactivating users, and more Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/famedly/conduit/-/releases/v0.8.0 - https://conduit.rs/changelog/#v0-8-0-2024-06-12
CVE ID: CVE-2024-6304 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:43.098Z Description: No description available.
CVE ID: CVE-2024-6305 State: REJECTED Published: 2024-06-25T11:09:21.240Z Last Updated: 2024-06-25T16:59:45.159Z Description: No description available.
CVE ID: CVE-2024-6306 State: REJECTED Published: 2024-06-25T11:09:22.113Z Last Updated: 2024-06-25T17:01:00.307Z Description: No description available.
CVE ID: CVE-2024-6307 State: PUBLISHED Published: 2024-06-25T11:09:23.005Z Last Updated: 2024-08-01T21:33:05.534Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: WordPress Foundation Products: WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a
tackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bc0d36f8-6569-49a1-b722-5cf57c4bb32a?source=cve - https://wordpress.org/news/2024/06/wordpress-6-5-5/ - https://core.trac.wordpress.org/changeset/58473 - https://core.trac.wordpress.org/changeset/58472
CVE ID: CVE-2024-6308 State: PUBLISHED Published: 2024-06-25T17:00:05.301Z Last Updated: 2024-08-01T21:33:05.413Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Simple Online Hotel Reservation System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269620. Additional Analyst Notes: -
disclosed to the public and may be used. The identifier of this vulnerability is VDB-269620. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.269620 - https://vuldb.com/?ctiid.269620 - https://vuldb.com/?submit.363955 - https://github.com/L1OudFd8cl09/CVE/blob/main/25_06_2024_a.md
CVE ID: CVE-2024-6309 State: PUBLISHED Published: 2024-07-09T07:38:46.281Z Last Updated: 2024-08-01T21:33:05.347Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: praveen-rajan Products: Attachment File Icons (AF Icons) Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Attachment File Icons (AF Icons) plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afi_overview' function and missing file type validation in the 'upload_icons' function. This makes it possible for unauthenticated attackers to upload arbitrary file
validation in the 'upload_icons' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e3fd472-c8ea-42dc-93df-872361ec97f3?source=cve - https://plugins.trac.wordpress.org/browser/attachment-file-icons/tags/1.3/attachment-file-icons.php#L130 - https://plugins.trac.wordpress.org/browser/attachment-file-icons/tags/1.3/atta
tags/1.3/attachment-file-icons.php#L130 - https://plugins.trac.wordpress.org/browser/attachment-file-icons/tags/1.3/attachment-file-icons.php#L337
CVE ID: CVE-2024-6310 State: PUBLISHED Published: 2024-07-09T07:38:47.893Z Last Updated: 2024-08-01T21:33:05.433Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: deano1987 Products: Advanced AJAX Page Loader Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.7.7. This is due to missing nonce validation in the 'admin_init_AAPL' function and missing file type validation in the 'AAPL_options_validate' function. This makes it possible for unauthenticated attackers to upload arbitrary files on
the 'AAPL_options_validate' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ccc75dee-1cf8-4fda-b2a1-f5d68e6c7887?source=cve - https://plugins.trac.wordpress.org/browser/advanced-ajax-page-loader/tags/2.7.7/advanced-ajax-page-loader.php#L41 - https://plugins.trac.wordpress.org/browser/advanced-ajax-page-loader/tags
tags/2.7.7/advanced-ajax-page-loader.php#L41 - https://plugins.trac.wordpress.org/browser/advanced-ajax-page-loader/tags/2.7.7/advanced-ajax-page-loader.php#L131
CVE ID: CVE-2024-6311 State: PUBLISHED Published: 2024-08-28T06:43:30.912Z Last Updated: 2024-09-06T16:21:34.562Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: funnelforms Products: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free Problem Types: CWE-434 Description: The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'af2_add_font' function in all versions up to, and including, 3.7.3.2. This makes it possible for authenticated attackers, with administrator-level and above permissions, to upload arbitrary files on the affected site's server
ated attackers, with administrator-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cbd42fc4-ab4a-4053-b765-18272eacd2bc?source=cve - https://plugins.trac.wordpress.org/browser/funnelforms-free/tags/3.7.3.2/admin/menu_ajax_functions/formularbuilder_fonts.php#L47 - https://plugins.trac.wordpress.org/browser/funnelforms-free/tags/3.7.4.1/admin/menu_ajax_functions/formularbuilder_fonts.php?rev=3141470#L50
CVE ID: CVE-2024-6312 State: PUBLISHED Published: 2024-08-28T06:43:30.277Z Last Updated: 2024-08-28T13:31:21.745Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: funnelforms Products: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free Problem Types: CWE-22 Description: The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.7.3.2 via the 'af2DeleteFontFile' function. This is due to the plugin not properly validating a file or its path prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the
path prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3e815531-f966-44a1-a037-8077a40c83b0?source=cve - https://plugins.trac.wordpress.org/browser/funnelforms-free/tags/3.7.3.2/admin/menu_ajax_functions/formularbuilder_fonts.php#L59 - https://plugins.trac.wordpress.org/browser/funnelforms-free/tags/3.7.4.1/admin/menu_ajax_functions/formularbuilder_fonts.php?rev=3141470#L17
CVE ID: CVE-2024-6313 State: PUBLISHED Published: 2024-07-09T07:38:46.855Z Last Updated: 2024-08-01T21:33:05.334Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: nikolaystrikhar Products: Gutenberg Forms – WordPress Form Builder Plugin Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Gutenberg Forms plugin for WordPress is vulnerable to arbitrary file uploads due to the users can specify the allowed file types in the 'upload' function in versions up to, and including, 2.2.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution
r unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b0315b53-46a1-46b4-a53e-0d914866ca50?source=cve - https://plugins.trac.wordpress.org/browser/forms-gutenberg/tags/2.2.9/triggers/email.php#L268 - https://plugins.trac.wordpress.org/browser/forms-gutenberg/tags/2.2.9/Utils/Bucket.php#L19
CVE ID: CVE-2024-6314 State: PUBLISHED Published: 2024-07-09T07:38:47.406Z Last Updated: 2024-08-01T21:33:05.392Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: rmac0001 Products: IQ Testimonials Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process_image_upload' function in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This can only be exploite
d arbitrary files on the affected site's server which may make remote code execution possible. This can only be exploited if the 'gd' php extension is not loaded on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bec50640-a550-49a8-baf6-2dd53995f90b?source=cve - https://plugins.trac.wordpress.org/browser/iq-testimonials/tags/2.2.7/lib/iq-testimonials-form.php#L296
CVE ID: CVE-2024-6315 State: PUBLISHED Published: 2024-08-06T01:49:57.531Z Last Updated: 2024-08-06T19:42:11.065Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: unitecms Products: Blox Page Builder Problem Types: CWE-434 Description: The Blox Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleUploadFile' function in all versions up to, and including, 1.0.65. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA
rary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0fe551db-2073-4eeb-83da-9ce8c2c031e1?source=cve - https://plugins.trac.wordpress.org/browser/blox-page-builder/trunk/inc_php/unitecreator_assets.class.php?rev=1866874#L979
CVE ID: CVE-2024-6316 State: PUBLISHED Published: 2024-07-09T07:38:44.604Z Last Updated: 2024-08-01T21:33:05.522Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: zealopensource Products: Generate PDF using Contact Form 7 Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.0.6. This is due to missing nonce validation and missing file type validation in the 'wp_cf7_pdf_dashboard_html_page' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the