deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52219
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in Gecka Gecka Terms Thumbnails.This issue affects Gecka Terms Thumbnails: from n/a through 1.1.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/gecka-terms-thumbnails/wordpress-gecka-terms-thumbnails-plugin-1-1-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gecka-terms-thumbnails/wordpress-gecka-terms-thumbnails-plugin-1-1-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52225
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/taggbox-widget/wordpress-tagbox-widget-plugin-3-1-unauthenticated-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/taggbox-widget/wordpress-tagbox-widget-plugin-3-1-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2018-25095
Published: 2024-01-08
Description: The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/16cc47aa-cb31-4114-b014-7ac5fbc1d3ee; https://wpscan.com/vulnerability/16cc47aa-cb31-4114-b014-7ac5fbc1d3ee
CVE: CVE-2021-3600
Published: 2024-01-08
Description: It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787, CWE-125, CWE-787
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600; https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90; https://ubuntu.com/security/notices/USN-5003-1
CVE: CVE-2023-1032
Published: 2024-01-08
Description: The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032; https://ubuntu.com/security/notices/USN-5977-1; https://ubuntu.com/security/notices/USN-6024-1
CVE: CVE-2023-52190
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-sensitive-data-pii-coupon-data-exposure-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-sensitive-data-pii-coupon-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2023-52207
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/html5-mp3-player-with-playlist/wordpress-html5-mp3-player-plugin-3-0-0-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/html5-mp3-player-with-playlist/wordpress-html5-mp3-player-plugin-3-0-0-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52208
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/constant-contact-forms/wordpress-constant-contact-forms-plugin-2-4-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/constant-contact-forms/wordpress-constant-contact-forms-plugin-2-4-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2023-52222
Published: 2024-01-08
Description: Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/woocommerce/wordpress-woocommerce-plugin-8-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce/wordpress-woocommerce-plugin-8-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-5235
Published: 2024-01-08
Description: The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'users_can_register' and 'default_role'. It also unserializes user input in the process, which may lead to Object Injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/35c9a954-37fc-4818-a71f-34aaaa0fa3db; https://wpscan.com/vulnerability/35c9a954-37fc-4818-a71f-34aaaa0fa3db
CVE: CVE-2023-5911
Published: 2024-01-08
Description: The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dde0767d-1dff-4261-adbe-1f3fdf2d9aae; https://wpscan.com/vulnerability/dde0767d-1dff-4261-adbe-1f3fdf2d9aae
CVE: CVE-2023-5957
Published: 2024-01-08
Description: The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web server, triggering an RCE vulnerability by uploading a web shell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/70f823ff-64ad-4f05-9eb3-b69b3b79dc12; https://wpscan.com/vulnerability/70f823ff-64ad-4f05-9eb3-b69b3b79dc12
CVE: CVE-2023-6042
Published: 2024-01-08
Description: Any unauthenticated user may send e-mail from the site with any title or content to the admin
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/56a1c050-67b5-43bc-b5b6-28d9a5a59eba; https://wpscan.com/vulnerability/56a1c050-67b5-43bc-b5b6-28d9a5a59eba
CVE: CVE-2023-6139
Published: 2024-01-08
Description: The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/96396a22-f523-4c51-8b72-52be266988aa; https://wpscan.com/vulnerability/96396a22-f523-4c51-8b72-52be266988aa
CVE: CVE-2023-6140
Published: 2024-01-08
Description: The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/c837eaf3-fafd-45a2-8f5e-03afb28a765b; https://wpscan.com/vulnerability/c837eaf3-fafd-45a2-8f5e-03afb28a765b
CVE: CVE-2023-6141
Published: 2024-01-08
Description: The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/df12513b-9664-45be-8824-2924bfddf364; https://wpscan.com/vulnerability/df12513b-9664-45be-8824-2924bfddf364
CVE: CVE-2023-6161
Published: 2024-01-08
Description: The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ca7b6a39-a910-4b4f-b9cc-be444ec44942; https://wpscan.com/vulnerability/ca7b6a39-a910-4b4f-b9cc-be444ec44942
CVE: CVE-2023-6383
Published: 2024-01-08
Description: The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/eae63103-3de6-4100-8f48-2bcf9a5c91fb; https://wpscan.com/vulnerability/eae63103-3de6-4100-8f48-2bcf9a5c91fb
CVE: CVE-2023-6505
Published: 2024-01-08
Description: The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/eca6f099-6af0-4f42-aade-ab61dd792629; https://wpscan.com/vulnerability/eca6f099-6af0-4f42-aade-ab61dd792629
CVE: CVE-2023-6528
Published: 2024-01-08
Description: The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/36ced447-84ea-4162-80d2-6df226cb53cb; https://wpscan.com/vulnerability/36ced447-84ea-4162-80d2-6df226cb53cb
CVE: CVE-2023-6529
Published: 2024-01-08
Description: The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing unauthenticated users to downgrade the plugin, thus leading to Reflected or Stored XSS, as previous versions have such vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/c36314c1-a2c0-4816-93c9-e61f9cf7f27a; https://wpscan.com/vulnerability/c36314c1-a2c0-4816-93c9-e61f9cf7f27a
CVE: CVE-2023-6532
Published: 2024-01-08
Description: The WP Blogs' Planetarium WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://magos-securitas.com/txt/CVE-2023-6532.txt; https://wpscan.com/vulnerability/05a730bc-2d72-49e3-a608-e4390b19e97f; https://magos-securitas.com/txt/CVE-2023-6532.txt
CVE: CVE-2023-6555
Published: 2024-01-08
Description: The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/58803934-dbd3-422d-88e7-ebbc5e8c0886; https://wpscan.com/vulnerability/58803934-dbd3-422d-88e7-ebbc5e8c0886
CVE: CVE-2023-6627
Published: 2024-01-08
Description: The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.28 does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/blog/stored-xss-fixed-in-wp-go-maps-9-0-28/; https://wpscan.com/vulnerability/f5687d0e-98ca-4449-98d6-7170c97c8f54; https://wpscan.com/blog/stored-xss-fixed-in-wp-go-maps-9-0-28/
CVE: CVE-2023-6631
Published: 2024-01-08
Description: PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.






CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://subnet.com/contact/; https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-01; https://subnet.com/contact/
CVE: CVE-2023-6750
Published: 2024-01-08
Description: The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statically defined file path.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/fad9eefe-4552-4d20-a1fd-bb2e172ec8d7; https://wpscan.com/vulnerability/fad9eefe-4552-4d20-a1fd-bb2e172ec8d7
CVE: CVE-2023-6845
Published: 2024-01-08
Description: The CommentTweets WordPress plugin through 0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://magos-securitas.com/txt/2023-6845; https://wpscan.com/vulnerability/cbdaf158-f277-4be4-b022-68d18dae4c55; https://magos-securitas.com/txt/2023-6845
CVE: CVE-2023-47890
Published: 2024-01-08
Description: pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: http://pyload.com; https://github.com/pyload/pyload/security/advisories/GHSA-h73m-pcfw-25h2; http://pyload.com
CVE: CVE-2023-50982
Published: 2024-01-08
Description: Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do not check the file extension. This leads to remote code execution with the privileges of the www-data user. The fixed versions are 5.3.4, 5.2.6, 5.1.7, and 5.0.9.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-434, CWE-79
References: https://gitlab.studip.de/studip/studip/-/tags; https://rehmeinfosec.de/labor/cve-2023-50982; https://sourceforge.net/projects/studip/files/Stud.IP/5.4/
CVE: CVE-2023-51246
Published: 2024-01-08
Description: A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/NING0121/25498c5326c2590423b26ace38d2cf39; https://github.com/NING0121/CVE/issues/1; https://gist.github.com/NING0121/25498c5326c2590423b26ace38d2cf39
CVE: CVE-2023-52200
Published: 2024-01-08
Description: Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: n/a.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352, CWE-502
References: https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-lite-plugin-4-0-22-cross-site-request-forgery-csrf-to-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-lite-plugin-4-0-22-cross-site-request-forgery-csrf-to-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52203
Published: 2024-01-08
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS.This issue affects cformsII: from n/a through 15.0.5.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/cforms2/wordpress-cformsii-plugin-15-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cforms2/wordpress-cformsii-plugin-15-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-52204
Published: 2024-01-08
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Javik Randomize.This issue affects Randomize: from n/a through 1.4.3.
CVSS Score: 8.5 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/randomize/wordpress-randomize-plugin-1-4-3-contributor-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/randomize/wordpress-randomize-plugin-1-4-3-contributor-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52205
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/html5-soundcloud-player-with-playlist/wordpress-html5-soundcloud-player-plugin-2-8-0-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/html5-soundcloud-player-with-playlist/wordpress-html5-soundcloud-player-plugin-2-8-0-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52206
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/live-composer-page-builder/wordpress-page-builder-live-composer-plugin-1-5-25-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/live-composer-page-builder/wordpress-page-builder-live-composer-plugin-1-5-25-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52213
Published: 2024-01-08
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through 1.5.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/rate-star-review/wordpress-rate-star-review-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/rate-star-review/wordpress-rate-star-review-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-52216
Published: 2024-01-08
Description: Cross-Site Request Forgery (CSRF) vulnerability in Yevhen Kotelnytskyi JS & CSS Script Optimizer.This issue affects JS & CSS Script Optimizer: from n/a through 0.3.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/js-css-script-optimizer/wordpress-js-css-script-optimizer-plugin-0-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/js-css-script-optimizer/wordpress-js-css-script-optimizer-plugin-0-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-52271
Published: 2024-01-08
Description: The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via an IOCTL (which will be named at a later time).
CVSS Score: 6.5 (MEDIUM)
References: https://northwave-cybersecurity.com/vulnerability-notice-topaz-antifraud; https://www.topazevolution.com/en/antifraud/; https://northwave-cybersecurity.com/vulnerability-notice-topaz-antifraud
CVE: CVE-2022-45354
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-7-60-sensitive-data-exposure-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-7-60-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2023-27739
Published: 2024-01-08
Description: easyXDM 2.5 allows XSS via the xdm_e parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://threeshield.ca/easyxdm-2.5.20.html; https://threeshield.ca/easyxdm-2.5.20.html
CVE: CVE-2023-49961
Published: 2024-01-08
Description: WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://www.wallix.com/support/alerts/; https://www.wallix.com/support/alerts/
CVE: CVE-2023-51406
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/fastdup/wordpress-fastdup-plugin-2-1-7-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fastdup/wordpress-fastdup-plugin-2-1-7-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2023-51408
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce.This issue affects WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce: from n/a through 1.4.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://patchstack.com/database/vulnerability/wp-optin-wheel/wordpress-wp-optin-wheel-plugin-1-4-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-optin-wheel/wordpress-wp-optin-wheel-plugin-1-4-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2023-51490
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-4-1-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-4-1-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE: CVE-2023-51508
Published: 2024-01-08
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimize & Repair: from n/a through 0.9.8.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://patchstack.com/database/vulnerability/database-cleaner/wordpress-database-cleaner-plugin-0-9-8-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/database-cleaner/wordpress-database-cleaner-plugin-0-9-8-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve