deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-44343
Published: 2024-02-29
Description: Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb23-55.html; https://helpx.adobe.com/security/products/indesign/apsb23-55.html
CVE: CVE-2023-44344
Published: 2024-02-29
Description: Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb23-55.html; https://helpx.adobe.com/security/products/indesign/apsb23-55.html
CVE: CVE-2023-44345
Published: 2024-02-29
Description: Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/indesign/apsb23-55.html; https://helpx.adobe.com/security/products/indesign/apsb23-55.html
CVE: CVE-2023-44346
Published: 2024-02-29
Description: Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb23-55.html; https://helpx.adobe.com/security/products/indesign/apsb23-55.html
CVE: CVE-2023-44347
Published: 2024-02-29
Description: Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb23-55.html; https://helpx.adobe.com/security/products/indesign/apsb23-55.html
CVE: CVE-2023-45874
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-47634
Published: 2024-02-29
Description: Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement. To exploit this vulnerability, the request to set an endorsement must be sent several times in parallel. Versions 0.26.9, 0.27.5, and 0.28.0 contain a patch for this issue. As a workaround, disable the Endorsement feature in the components. 
CVSS Score: 3.1 (LOW)
CWE: CWE-362, CWE-362
References: https://github.com/decidim/decidim/releases/tag/v0.26.9; https://github.com/decidim/decidim/releases/tag/v0.27.5; https://github.com/decidim/decidim/releases/tag/v0.28.0
CVE: CVE-2023-48650
Published: 2024-02-29
Description: Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable to an admin adding a stored XSS payload via the Layout Preset name.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes; https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates; https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
CVE: CVE-2023-48651
Published: 2024-02-29
Description: Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes; https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates; https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
CVE: CVE-2023-48653
Published: 2024-02-29
Description: Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross Site Request Forgery (CSRF) via ccm/calendar/dialogs/event/delete/submit. An attacker can force an admin to delete events on the site because the event ID is numeric and sequential.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes; https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates; https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
CVE: CVE-2023-49337
Published: 2024-02-29
Description: Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (8.5 and earlier are unaffected.)
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/concretecms/concretecms/commit/07b433799b888c4eb854e052ca58b032ebc6d36f; https://hackerone.com/reports/2232594; https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates
CVE: CVE-2023-49930
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-49931
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-49932
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-281
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-50436
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-50437
Published: 2024-02-29
Description: An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2.
CVSS Score: 8.6 (HIGH)
CWE: CWE-266
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://forums.couchbase.com/tags/security; https://www.couchbase.com/alerts/
CVE: CVE-2023-50658
Published: 2024-02-29
Description: The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/dvsekhvalnov/jose2go/commit/a4584e9dd7128608fedbc67892eba9697f0d5317; https://github.com/dvsekhvalnov/jose2go/compare/v1.5.0...v1.6.0; https://github.com/dvsekhvalnov/jose2go/commit/a4584e9dd7128608fedbc67892eba9697f0d5317
CVE: CVE-2023-51773
Published: 2024-02-29
Description: BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-126
References: https://github.com/bacnet-stack/bacnet-stack/blob/master/CHANGELOG.md; https://github.com/bacnet-stack/bacnet-stack/compare/bacnet-stack-1.3.1...bacnet-stack-1.3.2; https://github.com/bacnet-stack/bacnet-stack/pull/546
CVE: CVE-2023-51774
Published: 2024-02-29
Description: The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md; https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
CVE: CVE-2023-51775
Published: 2024-02-29
Description: The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bitbucket.org/b_c/jose4j/issues/212; https://bitbucket.org/b_c/jose4j/issues/212; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-51779
Published: 2024-02-29
Description: bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://github.com/torvalds/linux/commit/2e07e8348ea454615e268222ae3fc240421be768; https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html; https://github.com/torvalds/linux/commit/2e07e8348ea454615e268222ae3fc240421be768
CVE: CVE-2023-51835
Published: 2024-02-29
Description: An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77
References: https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c[PII_REDACTED]ab451d8; https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE; https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c[PII_REDACTED]ab451d8
CVE: CVE-2023-6247
Published: 2024-02-29
Description: The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://community.openvpn.net/openvpn/wiki/CVE-2023-6247; https://community.openvpn.net/openvpn/wiki/CVE-2023-6247
CVE: CVE-2023-6565
Published: 2024-02-29
Description: The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.12.3 via the multi-call backup option. This makes it possible for unauthenticated attackers to extract sensitive data from a temporary SQL file via repeated GET requests during the limited time window of the backup process.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-922
References: https://plugins.trac.wordpress.org/changeset/3007309/iwp-client; https://www.wordfence.com/threat-intel/vulnerabilities/id/2fdc32a4-adf8-4174-924b-5d0b763d010c?source=cve; https://plugins.trac.wordpress.org/changeset/3007309/iwp-client
CVE: CVE-2023-6806
Published: 2024-02-29
Description: The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3029599/starbox; https://www.wordfence.com/threat-intel/vulnerabilities/id/1f413fc2-8543-4478-987d-d983581027bf?source=cve; https://plugins.trac.wordpress.org/changeset/3029599/starbox
CVE: CVE-2023-6881
Published: 2024-02-29
Description: Possible buffer overflow in is_mount_point
CVSS Score: 7.3 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mh67-4h3q-p437; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mh67-4h3q-p437
CVE: CVE-2023-6923
Published: 2024-02-29
Description: The Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the idsite parameter in all versions up to, and including, 4.15.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3031495%40matomo&new=3031495%40matomo&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/2e2d54eb-c176-49c4-a4fc-833e17189cad?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3031495%40matomo&new=3031495%40matomo&sfp_email=&sfph_mail=
CVE: CVE-2023-7105
Published: 2024-02-29
Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249000.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%201.md; https://vuldb.com/?ctiid.249000; https://vuldb.com/?id.249000
CVE: CVE-2023-7106
Published: 2024-02-29
Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file product_details.php?prod_id=11. The manipulation of the argument prod_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249001 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%202.md; https://vuldb.com/?ctiid.249001; https://vuldb.com/?id.249001
CVE: CVE-2023-7107
Published: 2024-02-29
Description: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user_signup.php. The manipulation of the argument firstname/middlename/email/address/contact/username leads to sql injection. The attack may be launched remotely. VDB-249002 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%203.md; https://vuldb.com/?ctiid.249002; https://vuldb.com/?id.249002
CVE: CVE-2023-7108
Published: 2024-02-29
Description: A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249003.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20Stored%20Cross-site%20Scripting.md; https://vuldb.com/?ctiid.249003; https://vuldb.com/?id.249003
CVE: CVE-2023-7109
Published: 2024-02-29
Description: A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249004.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-1.md; https://vuldb.com/?ctiid.249004; https://vuldb.com/?id.249004
CVE: CVE-2023-7110
Published: 2024-02-29
Description: A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249005 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-2.md; https://vuldb.com/?ctiid.249005; https://vuldb.com/?id.249005
CVE: CVE-2023-7207
Published: 2024-02-29
Description: Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2024/01/05/1; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059163; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207
CVE: CVE-2024-0379
Published: 2024-02-29
Description: The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctf_auto_save_tokens function. This makes it possible for unauthenticated attackers to update the site's twitter API token and secret via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/custom-twitter-feeds/trunk/custom-twitter-feed.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3032345%40custom-twitter-feeds%2Ftrunk&new=3032345%40custom-twitter-feeds%2Ftrunk&sfp_email=&sfph_mail=#file3; https://www.wordfence.com/threat-intel/vulnerabilities/id/29e2ff11-053b-45cc-adf1-d276f1ee576e?source=cve
CVE: CVE-2024-0438
Published: 2024-02-29
Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link parameter in the Age Gate in all versions up to, and including, 3.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access or higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-29108 is likely a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/happy-elementor-addons/tags/3.10.1/assets/js/happy-addons.js#L991; https://plugins.trac.wordpress.org/browser/happy-elementor-addons/tags/3.10.1/extensions/wrapper-link.php#L50; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3028056%40happy-elementor-addons%2Ftrunk&old=3016053%40happy-elementor-addons%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2024-0442
Published: 2024-02-29
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via element URL parameters in all versions up to, and including, 1.3.87 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access or higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3032004/royal-elementor-addons/tags/1.3.88/modules/advanced-slider/widgets/wpr-advanced-slider.php?old=3026824&old_path=royal-elementor-addons%2Ftags%2F1.3.87%2Fmodules%2Fadvanced-slider%2Fwidgets%2Fwpr-advanced-slider.php; https://plugins.trac.wordpress.org/changeset/3032004/royal-elementor-addons/tags/1.3.88/modules/dual-button/widgets/wpr-dual-button.php?old=3026824&old_path=royal-elementor-addons%2Ftags%2F1.3.87%2Fmodules%2Fdual-button%2Fwidgets%2Fwpr-dual-button.php; https://plugins.trac.wordpress.org/changeset/3032004/royal-elementor-addons/tags/1.3.88/modules/pricing-table/widgets/pricing-table.php?old=3026824&old_path=royal-elementor-addons%2Ftags%2F1.3.87%2Fmodules%2Fpricing-table%2Fwidgets%2Fpricing-table.php
CVE: CVE-2024-0506
Published: 2024-02-29
Description: The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $instance[alt] parameter in the get_image_alt function in all versions up to, and including, 3.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access or higher to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/elementor/tags/3.18.3/includes/controls/groups/image-size.php#L119; https://plugins.trac.wordpress.org/browser/elementor/tags/3.18.3/includes/controls/media.php#L381; https://plugins.trac.wordpress.org/changeset/3024999/elementor/trunk/includes/controls/groups/image-size.php
CVE: CVE-2024-0512
Published: 2024-02-29
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the add_to_wishlist function. This makes it possible for unauthenticated attackers to add items to user wishlists via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026824%40royal-elementor-addons%2Ftags%2F1.3.87&new=3032004%40royal-elementor-addons%2Ftags%2F1.3.88; https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ff2954-f494-4cd7-9f29-ee0e8551e339?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026824%40royal-elementor-addons%2Ftags%2F1.3.87&new=3032004%40royal-elementor-addons%2Ftags%2F1.3.88