deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-0924
Published: 2025-02-17
Description: The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-security-audit-log/trunk/classes/Controllers/class-alert-manager.php; https://plugins.trac.wordpress.org/browser/wp-security-audit-log/trunk/classes/Controllers/class-alert.php; https://plugins.trac.wordpress.org/changeset/3238760/
CVE: CVE-2025-1376
Published: 2025-02-17
Description: A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.
CVSS Score: 2.5 (LOW)
CWE: CWE-404
References: https://sourceware.org/bugzilla/attachment.cgi?id=15940; https://sourceware.org/bugzilla/show_bug.cgi?id=32672; https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3
CVE: CVE-2025-1377
Published: 2025-02-17
Description: A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-404
References: https://sourceware.org/bugzilla/attachment.cgi?id=15941; https://sourceware.org/bugzilla/show_bug.cgi?id=32673; https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2
CVE: CVE-2025-1389
Published: 2025-02-17
Description: Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8432-4b516-2.html; https://www.twcert.org.tw/tw/cp-132-8431-61e42-1.html
CVE: CVE-2024-13603
Published: 2025-02-17
Description: The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/234a8d22-e6c6-4819-9ac0-434a96b3462d/
CVE: CVE-2024-13608
Published: 2025-02-17
Description: The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://wpscan.com/vulnerability/408e6cad-f02d-455a-9943-32da77537da1/
CVE: CVE-2024-13625
Published: 2025-02-17
Description: The Tube Video Ads Lite WordPress plugin through 1.5.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6bfabf1d-86f2-4d29-bc55-d618d757dcc6/
CVE: CVE-2024-13626
Published: 2025-02-17
Description: The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/511c6e7a-087f-41ef-9009-2525f332f8c6/
CVE: CVE-2024-13627
Published: 2025-02-17
Description: The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f7e425a1-ae49-4ea6-abe4-42ba2713af8f/
CVE: CVE-2024-13726
Published: 2025-02-17
Description: The  Coder  WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVSS Score: 8.6 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ec226d22-0c09-4e7c-86ec-b64819089b60/
CVE: CVE-2024-47935
Published: 2025-02-17
Description: Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance.
This issue affects StellarProtect (Legacy Mode): before 3.2; StellarEnforce: before 3.2; Safe Lock: from 3.0.0 before 3.1.1076.
*Note: StellarProtect (Legacy Mode) is the new name for StellarEnforce, they are the same product.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-354
References: https://www.txone.com/psirt/advisories/cve-2024-47935/
CVE: CVE-2025-1378
Published: 2025-02-17
Description: A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is able to address this issue. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: https://github.com/radareorg/radare2/commit/c6c772d2eab692ce7ada5a4227afd50c355ad545; https://github.com/radareorg/radare2/issues/23953; https://github.com/radareorg/radare2/issues/23953#issue[PII_REDACTED]
CVE: CVE-2025-1379
Published: 2025-02-17
Description: A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/1337g/realestatepropertymanagement_poc/blob/main/gu3.pdf; https://vuldb.com/?ctiid.295987
CVE: CVE-2025-1380
Published: 2025-02-17
Description: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/del_plan.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.295988; https://vuldb.com/?id.295988; https://vuldb.com/?submit.501980
CVE: CVE-2025-1381
Published: 2025-02-17
Description: A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax_city.php. The manipulation of the argument CityName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Lonpeak/cve/blob/main/upload-1.md; https://vuldb.com/?ctiid.295989
CVE: CVE-2025-0001
Published: 2025-02-17
Description: Abacus ERP is versions older than 2[PII_REDACTED]6, 2[PII_REDACTED]3, 2[PII_REDACTED]2 are affected by an authenticated arbitrary file read vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36
References: https://borelenzo.github.io/stuff/2025/02/15/CVE-2025-0001.html
CVE: CVE-2025-0714
Published: 2025-02-17
Description: The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted for their password. A derivative of the password is used as the master key. As both the master key and the IV are the same for each stored password, the AES CFB ciphertext depends only on the plaintext (the password). The static IV and master key make it easier to obtain sensitive information and to decrypt data when it is stored at rest.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1204
References: https://www.cirosec.de/sa/sa-2024-012
CVE: CVE-2025-23840
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjema WP-NOTCAPTCHA wp-notcaptcha allows Reflected XSS.This issue affects WP-NOTCAPTCHA: from n/a through <= 1.3.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/wp-notcaptcha/vulnerability/wordpress-wp-notcaptcha-plugin-1-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-23845
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ERA404 ImageMeta imagemeta allows Reflected XSS.This issue affects ImageMeta: from n/a through <= 1.1.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/imagemeta/vulnerability/wordpress-imagemeta-plugin-1-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26754
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through <= 1.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/timeline-block-block/vulnerability/wordpress-timeline-block-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26758
Published: 2025-02-17
Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social Media Feeds spotlight-social-photo-feeds allows Retrieve Embedded Sensitive Data.This issue affects Spotlight Social Media Feeds: from n/a through <= 1.7.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://patchstack.com/database/Wordpress/Plugin/spotlight-social-photo-feeds/vulnerability/wordpress-spotlight-social-feeds-plugin-1-7-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2025-26769
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Stored XSS.This issue affects Vertex Addons for Elementor: from n/a through <= 1.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/addons-for-elementor-builder/vulnerability/wordpress-vertex-addons-for-elementor-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26770
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through <= 1.5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/waymark/vulnerability/wordpress-waymark-plugin-1-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26771
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/skt-blocks/vulnerability/wordpress-skt-blocks-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26772
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through <= 2.1.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/dethemekit-for-elementor/vulnerability/wordpress-dethemekit-for-elementor-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26773
Published: 2025-02-17
Description: Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/wp-analytify/vulnerability/wordpress-analytify-plugin-5-5-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-26775
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/woo-bulk-editor/vulnerability/wordpress-bear-plugin-1-1-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-26778
Published: 2025-02-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery gallery allows Stored XSS.This issue affects Gallery: from n/a through <= 2.2.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/gallery/vulnerability/wordpress-gallery-custom-links-plugin-2-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-1391
Published: 2025-02-17
Description: A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern. This issue occurs at the mapper level, leading to misrepresentation in tokens. If an application relies on these claims for authorization, it may incorrectly assume a user belongs to an organization they are not a member of, potentially granting unauthorized access or privileges.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://access.redhat.com/errata/RHSA-2025:2544; https://access.redhat.com/errata/RHSA-2025:2545; https://access.redhat.com/security/cve/CVE-2025-1391
CVE: CVE-2025-21103
Published: 2025-02-17
Description: Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-97
References: https://www.dell.com/support/kbdoc/en-us/000286268/dsa-2025-095-security-update-for-dell-networker-management-console-vulnerability
CVE: CVE-2024-13879
Published: 2025-02-17
Description: The Stream plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.2 due to insufficient validation on the webhook feature. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/xwp/stream/blob/develop/changelog.md#410---january-15-2025; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226637%40stream&new=3226637%40stream&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8680ad0a-7513-408d-a62d-ffb0b0e7addb?source=cve
CVE: CVE-2025-1392
Published: 2025-02-17
Description: A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://vuldb.com/?ctiid.296023; https://vuldb.com/?id.296023; https://vuldb.com/?submit.501351
CVE: CVE-2024-13837
Published: 2025-02-17
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2021-30369
Published: 2025-02-17
Description: Rejected reason: Was determined not a vulnerability.
CVE: CVE-2024-25066
Published: 2025-02-17
Description: RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-611
References: https://community.rsa.com/s/advisories; https://community.rsa.com/s/article/RSA-Authentication-Manager-8-7-SP2-Patch-1-Readme; https://github.com/KaiwenTM/CVE_POC/blob/main/CVE-2024-25066.txt
CVE: CVE-2021-46686
Published: 2025-02-18
Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://acmailer.jp/info/de.cgi?id=103; https://jvn.jp/en/jp/JVN96957439/; https://www.acmailer.jp/info/de.cgi?id=102
CVE: CVE-2025-20075
Published: 2025-02-18
Description: Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0. Executing arbitrary backend Web API requests could potentially lead to rebooting the services.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://jvn.jp/en/jp/JVN80527854/; https://www.info-brdg.co.jp/support/report/megane/sec20250201.html
CVE: CVE-2025-25055
Published: 2025-02-18
Description: Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://jvn.jp/en/jp/JVN80527854/; https://www.info-brdg.co.jp/support/report/megane/sec20250201.html
CVE: CVE-2025-25221
Published: 2025-02-18
Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN26024080/; https://www.luxsoft.eu/?download; https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
CVE: CVE-2025-25222
Published: 2025-02-18
Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN26024080/; https://www.luxsoft.eu/?download; https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
CVE: CVE-2025-25223
Published: 2025-02-18
Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN26024080/; https://www.luxsoft.eu/?download; https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
CVE: CVE-2025-25224
Published: 2025-02-18
Description: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://jvn.jp/en/jp/JVN26024080/; https://www.luxsoft.eu/?download; https://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
CVE: CVE-2024-13741
Published: 2025-02-18
Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/public/class-profile-magic-public.php#L1717; https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/public/partials/crop.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/95d2a05d-67ae-45b1-8add-0dcf73d43181?source=cve
CVE: CVE-2024-13740
Published: 2025-02-18
Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.4.2 via the pm_messenger_show_messages function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read private conversations of other users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.4.2/public/class-profile-magic-public.php#L1299; https://www.wordfence.com/threat-intel/vulnerabilities/id/c2a1b1a4-df72-4666-b116-882af4cd5796?source=cve
CVE: CVE-2025-1390
Published: 2025-02-18
Description: The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=18804