Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24684 State: PUBLISHED Published: 2024-05-28T14:02:39.939Z Last Updated: 2025-02-13T17:40:18.620Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libigl Products: libigl Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the header parsing occuring while processing an `.off` file via the `readOFF` function. We can see above that at [0] a stack-based buffer called `comment` is defined wit
.off` file via the `readOFF` function. We can see above that at [0] a stack-based buffer called `comment` is defined with an hardcoded size of `1000 bytes`. The call to `fscanf` at [1] is unsafe and if the first line of the header of the `.off` files is longer than 1000 bytes it will overflow the `header` buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1929
CVE ID: CVE-2024-24685 State: PUBLISHED Published: 2024-05-28T14:02:40.055Z Last Updated: 2025-02-13T17:40:19.237Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libigl Products: libigl Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the vertex section of an `.off` file processed via the `readOFF` function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
of an `.off` file processed via the `readOFF` function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1929
CVE ID: CVE-2024-24686 State: PUBLISHED Published: 2024-05-28T14:02:40.153Z Last Updated: 2025-02-13T17:40:19.923Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libigl Products: libigl Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the faces section of an `.off` file processed via the `readOFF` function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
CVE ID: CVE-2024-24690 State: PUBLISHED Published: 2024-02-14T00:00:04.089Z Last Updated: 2024-09-20T14:50:06.835Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-1284 Description: Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24007/
CVE ID: CVE-2024-24691 State: PUBLISHED Published: 2024-02-14T00:01:30.884Z Last Updated: 2025-05-12T15:07:21.269Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows Problem Types: CWE-176 Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/e
access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/
CVE ID: CVE-2024-24692 State: PUBLISHED Published: 2024-03-13T19:27:30.446Z Last Updated: 2024-08-01T23:28:11.184Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms Client for Windows Problem Types: CWE-367 Description: Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24009/
CVE ID: CVE-2024-24693 State: PUBLISHED Published: 2024-03-13T19:30:22.311Z Last Updated: 2024-09-20T14:45:54.008Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms Client for Windows Problem Types: CWE-379 Description: Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24009/
CVE ID: CVE-2024-24694 State: PUBLISHED Published: 2024-04-09T17:13:08.845Z Last Updated: 2024-09-20T14:41:30.868Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows Problem Types: CWE-347 Description: Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24011/
CVE ID: CVE-2024-24695 State: PUBLISHED Published: 2024-02-13T23:50:22.837Z Last Updated: 2025-04-10T18:55:17.333Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows Problem Types: CWE-20 Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/tr
ss. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24002/
CVE ID: CVE-2024-24696 State: PUBLISHED Published: 2024-02-13T23:51:34.285Z Last Updated: 2024-08-01T23:28:11.800Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows Problem Types: CWE-20 Description: Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/tr
ss. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24003/
CVE ID: CVE-2024-24697 State: PUBLISHED Published: 2024-02-13T23:53:43.589Z Last Updated: 2025-05-08T15:34:41.744Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-426 Description: Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24004/
CVE ID: CVE-2024-24698 State: PUBLISHED Published: 2024-02-13T23:56:14.515Z Last Updated: 2024-09-27T19:28:28.333Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-449 Description: Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/
CVE ID: CVE-2024-24699 State: PUBLISHED Published: 2024-02-13T23:58:44.327Z Last Updated: 2025-03-13T17:31:26.034Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: Business Logic Error Description: Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-24006/
CVE ID: CVE-2024-24700 State: PUBLISHED Published: 2024-03-27T05:48:27.636Z Last Updated: 2024-08-02T18:52:09.296Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Benjamin Rojas Products: WP Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Rojas WP Editor allows Reflected XSS.This issue affects WP Editor: from n/a through 1.2.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-editor/wordpress-wp-editor-plugin-1-2-8-reflected-cross-site-scripting-xss-vulnerability?_s_id
database/vulnerability/wp-editor/wordpress-wp-editor-plugin-1-2-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24701 State: PUBLISHED Published: 2024-02-28T16:16:04.657Z Last Updated: 2024-08-27T16:53:39.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Native Grid LLC Products: A no-code page builder for beautiful performance-based content Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/setk
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/setka-editor/wordpress-setka-editor-plugin-2-1-20-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24702 State: PUBLISHED Published: 2024-02-28T14:32:07.215Z Last Updated: 2024-08-01T23:28:11.815Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Matt Martz & Andy Stratton Products: Page Restrict Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Restrict: from n/a through 2.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pagerestrict/wordpress-page-restrict-plugin-2-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24703 State: PUBLISHED Published: 2024-06-11T14:54:05.823Z Last Updated: 2024-08-01T23:28:11.166Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: MultiVendorX Products: WC Marketplace Problem Types: CWE-862 Description: Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-plugin-4-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24704 State: PUBLISHED Published: 2024-06-11T09:25:00.427Z Last Updated: 2024-08-01T23:28:11.161Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: AddonMaster Products: Load More Anything Problem Types: CWE-862 Description: Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a through 3.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ajax-load-more-anything/wordpress-load-more-anything-plugin-3-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24705 State: PUBLISHED Published: 2024-02-28T14:26:04.199Z Last Updated: 2024-08-01T23:28:11.192Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Octa Code Products: Accessibility Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/accessibility/wordpress-accessibility-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24706 State: PUBLISHED Published: 2024-02-07T16:50:03.728Z Last Updated: 2024-08-01T23:28:11.150Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Forum One Products: WP-CFM Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-cfm/wordpress-wp-cfm-plugin-1-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://github.com/forumone/wp-cfm/security/advisories/GHSA-2449-jmfc-gc7f
CVE ID: CVE-2024-24707 State: PUBLISHED Published: 2024-04-03T12:20:42.983Z Last Updated: 2024-08-01T23:28:11.170Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Cwicly Builder, SL. Products: Cwicly Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a through 1.4.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cwicly/wordpress-cwicly-plugin-1-4-0-2-remote-code-execution-rce-vulnerability?_s_id=cve - https://snicco.io/vulnera
ity/cwicly/wordpress-cwicly-plugin-1-4-0-2-remote-code-execution-rce-vulnerability?_s_id=cve - https://snicco.io/vulnerability-disclosure/cwicly/remote-code-execution-cwicly-1-4-0-2?_s_id=cve
CVE ID: CVE-2024-24708 State: PUBLISHED Published: 2024-02-28T13:20:16.604Z Last Updated: 2024-08-01T23:28:11.193Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: W3speedster Products: W3SPEEDSTER Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/w3speedster-wp/wordpress-w3speedster-plugin-7-19-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24710 State: PUBLISHED Published: 2024-05-03T07:40:29.840Z Last Updated: 2024-08-01T23:28:11.883Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SlickRemix Products: Feed Them Social Problem Types: CWE-862 Description: Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/feed-them-social/wordpress-feed-them-social-plugin-4-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24711 State: PUBLISHED Published: 2024-03-26T11:43:09.520Z Last Updated: 2024-08-02T16:07:35.139Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: weDevs Products: WooCommerce Conversion Tracking Problem Types: CWE-862 Description: Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-conversion-tracking/wordpress-woocommerce-conversion-tracking-plugin-2-0-11-broken-access-control-csrf-vulnerabilit
erce-conversion-tracking/wordpress-woocommerce-conversion-tracking-plugin-2-0-11-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24712 State: PUBLISHED Published: 2024-02-10T08:05:29.864Z Last Updated: 2024-08-01T23:28:12.797Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Team Heateor Products: Heateor Social Login WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login WordPress allows Stored XSS.This issue affects Heateor Social Login WordPress: from n/a through 1.1.30. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/heateor-social-login/wordpress-heateor
VE Program Container: References: - https://patchstack.com/database/vulnerability/heateor-social-login/wordpress-heateor-social-login-plugin-1-1-30-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24713 State: PUBLISHED Published: 2024-02-10T08:01:02.036Z Last Updated: 2024-08-01T23:28:11.830Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Auto Listings Products: Auto Listings – Car Listings & Car Dealership Plugin for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress allows Stored XSS.This issue affects Auto Listings – Car Listings & Car Dealership Plugin for WordPress: from n/a through 2.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
Car Dealership Plugin for WordPress: from n/a through 2.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auto-listings/wordpress-auto-listings-plugin-2-6-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24714 State: PUBLISHED Published: 2024-02-26T15:39:46.200Z Last Updated: 2024-08-14T14:19:39.002Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: bPlugins LLC Products: Icons Font Loader Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/icons-font-loader/wordpress-icons-font-loader-plugin-1-1-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-24715 State: PUBLISHED Published: 2024-05-17T08:48:05.463Z Last Updated: 2024-08-01T23:28:11.993Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: The Events Calendar Products: BookIt Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in The Events Calendar BookIt allows Manipulating Hidden Fields.This issue affects BookIt: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bookit/wordpress-wordpress-bookit-plugin-plugin-2-4-0-price-bypass-vulnerability-vulnerability?_s_id=cve
CVE ID: CVE-2024-24716 State: PUBLISHED Published: 2024-06-09T10:21:32.133Z Last Updated: 2024-08-01T23:28:11.844Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Awesome Support Team Products: Awesome Support Problem Types: CWE-862 Description: Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-1-6-broken-access-control-vulnerability-3?_s_id=cve
CVE ID: CVE-2024-24717 State: PUBLISHED Published: 2024-02-10T07:57:03.226Z Last Updated: 2024-08-01T23:28:12.690Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark Kinchin Products: Beds24 Online Booking Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/beds24-online-booking/wordpress-beds24-online-booking-plugin-2-0-
ences: - https://patchstack.com/database/vulnerability/beds24-online-booking/wordpress-beds24-online-booking-plugin-2-0-23-admin-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24718 State: PUBLISHED Published: 2024-03-26T11:33:42.292Z Last Updated: 2024-08-06T14:35:53.127Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: PropertyHive Products: PropertyHive Problem Types: CWE-862 Description: Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/propertyhive/wordpress-propertyhive-plugin-2-0-6-missing-authorization-to-non-arbitrary-plugin-installation-vulnerability?_s_id=cve
CVE ID: CVE-2024-24719 State: PUBLISHED Published: 2024-03-26T11:31:23.264Z Last Updated: 2024-08-02T17:30:36.040Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Uriahs Victor Products: Location Picker at Checkout for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce: from n/a through 1.8.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/map-location-picker-at-checkout-for-woocommerce/wordpress-kikote-plugin-1-8-9-
s://patchstack.com/database/vulnerability/map-location-picker-at-checkout-for-woocommerce/wordpress-kikote-plugin-1-8-9-broken-access-control-vulnerability?_s_id=cve