Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47803 State: PUBLISHED Published: 2024-06-28T06:03:01.476Z Last Updated: 2024-08-02T21:16:43.667Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Camera Firmware Problem Types: CWE-22 Description: A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attackers to read specific files containing non-sensitive information via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: -
mware versions before 1.0.7-0298 may be affected: BC500 and TC500. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_15
CVE ID: CVE-2023-47804 State: PUBLISHED Published: 2023-12-29T14:31:28.081Z Last Updated: 2025-02-13T17:18:09.085Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: CWE-20, CWE-88 Description: Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject to user approval. In the affected versions of OpenOffice, approval for certain links is not requested; when activated, such links could therefore result in arbitrary script execution. This is a corner case of CVE-2022-4
ed; when activated, such links could therefore result in arbitrary script execution. This is a corner case of CVE-2022-47502. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/ygp59swfcy6g46jf8v9s6qpwmxn8fsvb - https://www.openoffice.org/security/cves/CVE-2023-47804.html - http://www.openwall.com/lists/oss-security/2024/01/03/3
CVE ID: CVE-2023-47805 State: PUBLISHED Published: 2024-12-09T11:30:44.255Z Last Updated: 2024-12-09T17:02:51.130Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Themewinter Products: WPCafe Problem Types: CWE-862 Description: Missing Authorization vulnerability in Themewinter WPCafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through 2.2.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-cafe/vulnerability/wordpress-wpcafe-plugin-2-2-19-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47806 State: PUBLISHED Published: 2023-12-18T15:45:28.427Z Last Updated: 2024-08-02T21:16:43.684Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Saint Systems Products: Disable User Login Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/disable-user-login/wordpress-disable-user-login-plugin-1-3-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47807 State: PUBLISHED Published: 2025-01-02T14:16:14.550Z Last Updated: 2025-01-02T14:44:50.397Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: 10Web Products: 10WebAnalytics Problem Types: CWE-862 Description: Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through 1.2.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wd-google-analytics/vulnerability/wordpress-10webanalytics-plugin-1-2-12-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47808 State: PUBLISHED Published: 2023-11-22T22:12:22.743Z Last Updated: 2024-08-02T21:16:43.673Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Christina Uechi Products: Add Widgets to Page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christina Uechi Add Widgets to Page plugin <= 1.3.2 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/add-widgets-to-page/wordpress-add-widgets-to-page-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47809 State: PUBLISHED Published: 2023-11-22T22:15:10.951Z Last Updated: 2024-08-02T21:16:43.710Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Themepoints Products: Accordion Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Accordion plugin <= 2.6 versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/accordions-wp/wordpress-accordion-plugin-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47810 State: PUBLISHED Published: 2023-11-22T22:19:34.384Z Last Updated: 2024-08-02T21:16:43.620Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Asdqwe Dev Products: Ajax Domain Checker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asdqwe Dev Ajax Domain Checker plugin <= 1.3.0 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ajax-domain-checker/wordpress-ajax-domain-checker-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47811 State: PUBLISHED Published: 2023-11-22T22:22:13.092Z Last Updated: 2024-08-02T21:16:43.612Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Suresh KUMAR Mukhiya Products: Anywhere Flash Embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Suresh KUMAR Mukhiya Anywhere Flash Embed plugin <= 1.0.5 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/anywhere-flash-embed/wordpress-anywhere-flash-embed-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47812 State: PUBLISHED Published: 2023-11-22T22:40:12.774Z Last Updated: 2024-08-02T21:16:43.715Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bamboo Mcr Products: Bamboo Columns Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bamboo Mcr Bamboo Columns plugin <= 1.6.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bamboo-columns/wordpress-bamboo-columns-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47813 State: PUBLISHED Published: 2023-11-22T22:43:33.243Z Last Updated: 2024-08-02T21:16:43.766Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: grandslambert Products: Better RSS Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in grandslambert Better RSS Widget plugin <= 2.8.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/better-rss-widget/wordpress-better-rss-widget-plugin-2-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47814 State: PUBLISHED Published: 2023-11-22T22:45:45.867Z Last Updated: 2024-08-02T21:16:43.670Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Waterloo Plugins Products: BMI Calculator Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Waterloo Plugins BMI Calculator Plugin plugin <= 1.0.3 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bmi-calculator-shortcode/wordpress-bmi-calculator-plugin-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47815 State: PUBLISHED Published: 2023-11-22T22:48:09.772Z Last Updated: 2024-08-02T21:16:43.682Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Venutius Products: BP Profile Shortcodes Extra Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Venutius BP Profile Shortcodes Extra plugin <= 2.5.2 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bp-profile-shortcodes-extra/wordpress-bp-profile-shortcodes-extra-plugin-2-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47816 State: PUBLISHED Published: 2023-11-22T22:57:25.424Z Last Updated: 2024-10-01T15:49:07.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Charitable Donations & Fundraising Team Products: Donation Forms by Charitable Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/charitable/wordpress-charitable-plugin-1-7-0-13-cross
hment: References: - https://patchstack.com/database/vulnerability/charitable/wordpress-charitable-plugin-1-7-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47817 State: PUBLISHED Published: 2023-11-22T23:00:12.838Z Last Updated: 2024-11-20T21:10:22.543Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mmrs151 Products: Daily Prayer Time Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.10.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/daily-prayer-time-for-mosques/wordpress-daily-prayer-time-plugin-2023-10-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47818 State: PUBLISHED Published: 2024-06-04T10:08:41.550Z Last Updated: 2024-08-09T18:42:24.835Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: LWS Products: LWS Hide Login Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/lws-hide-login/wordpress-lws-hide-login-plugin-2-1-8-secret-login-page-location-disclos
stack.com/database/vulnerability/lws-hide-login/wordpress-lws-hide-login-plugin-2-1-8-secret-login-page-location-disclosure-on-multisites-vulnerability?_s_id=cve
CVE ID: CVE-2023-47819 State: PUBLISHED Published: 2023-11-22T18:46:57.754Z Last Updated: 2025-06-05T14:20:22.606Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Dang Ngoc Binh Products: Easy Call Now by ThikShare Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin <= 1.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-call-now/wordpress-easy-call-now-by-thikshare-plugin-1-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47820 State: PUBLISHED Published: 2024-12-09T11:30:43.259Z Last Updated: 2024-12-09T13:49:57.370Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CRUDLab Products: WP Like Button Problem Types: CWE-862 Description: Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-like-button/vulnerability/wordpress-wp-like-button-plugin-1-7-0-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47821 State: PUBLISHED Published: 2023-11-22T23:05:32.309Z Last Updated: 2024-08-02T21:16:43.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jannis Thuemmig Products: Email Encoder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jannis Thuemmig Email Encoder plugin <= 2.1.8 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/email-encoder-bundle/wordpress-email-encoder-bundle-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47822 State: PUBLISHED Published: 2024-12-09T11:30:42.283Z Last Updated: 2024-12-09T13:49:57.483Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Sonaar Music Products: MP3 Audio Player for Music, Radio & Podcast by Sonaar Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/m
.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mp3-music-player-by-sonaar/vulnerability/wordpress-mp3-audio-player-for-music-radio-podcast-by-sonaar-plugin-4-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47823 State: PUBLISHED Published: 2024-12-09T11:30:41.483Z Last Updated: 2024-12-09T17:04:38.133Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: nCrafts Products: FormCraft Problem Types: CWE-862 Description: Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/formcraft-form-builder/vulnerability/wordpress-formcraft-contact-form-builder-for-wordpress-plugin-1-2-7-broken-access-control-vulnerability?_
/vulnerability/wordpress-formcraft-contact-form-builder-for-wordpress-plugin-1-2-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47824 State: PUBLISHED Published: 2023-11-22T19:36:59.536Z Last Updated: 2024-08-02T21:16:43.683Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: wpWax Products: Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/legal-pages/wordpress-legal-pages-plugin-1-3-8-cross-site-request-forgery-csr
ps://patchstack.com/database/vulnerability/legal-pages/wordpress-legal-pages-plugin-1-3-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47825 State: PUBLISHED Published: 2023-11-22T19:40:46.132Z Last Updated: 2024-08-02T21:16:43.781Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: TienCOP Products: WP EXtra Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-extra/wordpress-wp-extra-plugin-6-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47826 State: PUBLISHED Published: 2024-12-09T11:30:40.653Z Last Updated: 2024-12-09T17:14:42.007Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: NicheAddons Products: Restaurant & Cafe Addon for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/restaurant-cafe-addon-for-elementor/vulnerability/
hment: References: - https://patchstack.com/database/wordpress/plugin/restaurant-cafe-addon-for-elementor/vulnerability/wordpress-restaurant-cafe-addon-for-elementor-plugin-1-5-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47827 State: PUBLISHED Published: 2023-11-30T13:31:35.321Z Last Updated: 2024-10-01T14:27:27.950Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: NicheAddons Products: Events Addon for Elementor Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in NicheAddons Events Addon for Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Events Addon for Elementor: from n/a through 2.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/events-addon-for-elementor/wordpress-events-addon-for-elementor-plu
ces: - https://patchstack.com/database/vulnerability/events-addon-for-elementor/wordpress-events-addon-for-elementor-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47828 State: PUBLISHED Published: 2024-06-12T09:11:52.713Z Last Updated: 2024-08-02T21:16:43.754Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Mandrill Products: wpMandrill Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mandrill wpMandrill.This issue affects wpMandrill: from n/a through 1.33. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpmandrill/wordpress-wpmandrill-plugin-1-33-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47829 State: PUBLISHED Published: 2023-11-22T23:09:00.555Z Last Updated: 2024-08-02T21:16:43.714Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Codez Products: Quick Call Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codez Quick Call Button plugin <= 1.2.9 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/quick-call-button/wordpress-quick-call-button-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47830 State: PUBLISHED Published: 2024-12-09T11:30:39.788Z Last Updated: 2024-12-09T13:49:57.593Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Addons for Contact Form 7 Products: Live Preview for Contact Form 7 Problem Types: CWE-862 Description: Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Preview for Contact Form 7: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-live-preview/vulnerability/wordpress
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-live-preview/vulnerability/wordpress-live-preview-for-contact-form-7-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47831 State: PUBLISHED Published: 2023-11-22T23:11:22.978Z Last Updated: 2024-08-02T21:16:43.764Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: assorted[chips] Products: DrawIt (draw.io) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in assorted[chips] DrawIt (draw.Io) plugin <= 1.1.3 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/drawit/wordpress-drawit-draw-io-plugin-1-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47832 State: PUBLISHED Published: 2024-12-09T11:30:38.988Z Last Updated: 2024-12-09T17:24:46.193Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: searchiq Products: SearchIQ Problem Types: CWE-862 Description: Missing Authorization vulnerability in searchiq SearchIQ allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through 4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/searchiq/vulnerability/wordpress-searchiq-plugin-4-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47833 State: PUBLISHED Published: 2023-11-22T23:13:57.914Z Last Updated: 2024-08-02T21:16:43.759Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jeroen Schmit Products: Theater for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress plugin <= 0.18.3 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theatre/wordpress-theater-for-wordpress-plugin-0-18-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47834 State: PUBLISHED Published: 2023-11-22T23:16:40.330Z Last Updated: 2024-08-02T21:16:43.767Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ExpressTech Products: Quiz And Survey Master Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master plugin <= 8.1.13 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47835 State: PUBLISHED Published: 2023-11-22T23:20:12.431Z Last Updated: 2024-08-02T21:16:43.616Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ARI Soft Products: ARI Stream Quiz – WordPress Quizzes Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ari-stream-quiz/wordpress-ari-stream-quiz-plugin-1-2-32-cross-site-scripting-xss-vulnerability?_s_id=cve