deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-50790
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream details without requiring authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247923; https://packetstormsecurity.com/files/170261/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Radio-Steam-Disclosure.html; https://www.sound4.com/
CVE: CVE-2022-50791
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the vulnerable ping.php script, which triggers the malicious file and then deletes it.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247915; https://packetstormsecurity.com/files/170262/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-ping.php-Command-Injection.html; https://www.sound4.com/
CVE: CVE-2022-50792
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive system files. Attackers can exploit the vulnerability by manipulating the 'file' GET parameter to disclose arbitrary files on the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247916; https://packetstormsecurity.com/files/170263/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Unauthenticated-File-Disclosure.html; https://www.sound4.com/
CVE: CVE-2022-50793
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows attackers to inject system commands through the 'services' POST parameter. Attackers can exploit this vulnerability by crafting malicious 'services' parameter values to execute arbitrary system commands with www-data user privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247917; https://packetstormsecurity.com/files/170264/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-services-Command-Injection.html; https://www.sound4.com/
CVE: CVE-2022-50794
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. Attackers can exploit index.php and login.php scripts by injecting arbitrary shell commands through the HTTP POST 'username' parameter to execute system commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247914; https://packetstormsecurity.com/files/170266/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-username-Command-Injection.html; https://www.sound4.com/
CVE: CVE-2022-50795
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the traceroute.php script, which triggers the malicious file and then deletes it after execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247950; https://packetstormsecurity.com/files/170267/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-traceroute.php-Conditional-Command-Injection.html; https://www.sound4.com/
CVE: CVE-2022-50796
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247951; https://packetstormsecurity.com/files/170268/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-upload.cgi-Code-Execution.html; https://www.sound4.com/
CVE: CVE-2022-50798
Published: 2025-12-30
Description: Rejected reason: This candidate is a duplicate of CVE-2017-11359.
CVE: CVE-2022-50799
Published: 2025-12-30
Description: Fetch FTP Client 5.8.2 contains a denial of service vulnerability that allows attackers to trigger 100% CPU consumption by sending long server responses. Attackers can send specially crafted FTP server responses exceeding 2K bytes to cause excessive resource utilization and potentially crash the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://www.exploit-db.com/exploits/50696; https://www.fetchsoftworks.com; https://www.vulncheck.com/advisories/fetch-softworks-fetch-ftp-client-remote-cpu-consumption-denial-of-service
CVE: CVE-2022-50800
Published: 2025-12-30
Description: H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: https://www.exploit-db.com/exploits/50742; https://www.h3c.com; https://www.vulncheck.com/advisories/hc-ssl-vpn-na-username-enumeration-via-login-script-credential-verification
CVE: CVE-2022-50801
Published: 2025-12-30
Description: JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting (XSS) attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/229343; https://packetstormsecurity.com/files/167487/
CVE: CVE-2022-50802
Published: 2025-12-30
Description: ETAP Safety Manager 1.0.0.32 contains a cross-site scripting vulnerability in the 'action' GET parameter that allows unauthenticated attackers to inject malicious HTML and JavaScript. Attackers can craft specially formed requests to execute arbitrary scripts in victim browser sessions, potentially stealing credentials or performing unauthorized actions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/235743; https://packetstormsecurity.com/files/168339/
CVE: CVE-2022-50803
Published: 2025-12-30
Description: JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/229344; https://packetstormsecurity.com/files/167487/
CVE: CVE-2022-50804
Published: 2025-12-30
Description: JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/229355; https://packetstormsecurity.com/files/167487/
CVE: CVE-2023-53983
Published: 2025-12-30
Description: Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/259059; https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html
CVE: CVE-2023-54163
Published: 2025-12-30
Description: NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/175113/NLB-mKlik-Makedonija-3.3.12-SQL-Injection.html; https://play.google.com/store/apps/details?id=hr.asseco.android.jimba.tutunskamk.production
CVE: CVE-2023-54327
Published: 2025-12-30
Description: Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://www.exploit-db.com/exploits/51732; https://www.tinycontrol.pl; https://www.vulncheck.com/advisories/tinycontrol-lan-controller-a-authentication-bypass-via-admin-password-change
CVE: CVE-2024-58315
Published: 2025-12-30
Description: Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://packetstormsecurity.com/files/177260/; https://www.tosi.net/; https://www.vulncheck.com/advisories/tosibox-key-service-local-privilege-escalation-via-unquoted-service-path
CVE: CVE-2024-58336
Published: 2025-12-30
Description: Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://packetstormsecurity.com/files/180262/; https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-unauthenticated-video-stream-disclosure; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5826.php
CVE: CVE-2024-58337
Published: 2025-12-30
Description: Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/182870/; https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi
CVE: CVE-2024-58338
Published: 2025-12-30
Description: Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through the traceroute command. Attackers can exploit the traceroute command to inject shell commands and gain full root access to the device by bypassing the restricted login environment.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.ateme.com; https://www.exploit-db.com/exploits/51516; https://www.vulncheck.com/advisories/anevia-flamingo-xl-remote-root-jailbreak-via-traceroute-command
CVE: CVE-2025-15111
Published: 2025-12-30
Description: Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://packetstorm.news/files/id/190180/; https://www.kseniasecurity.com/; https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-default-credentials-vulnerability
CVE: CVE-2025-15112
Published: 2025-12-30
Description: Ksenia Security lares (legacy model) version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter. Attackers can craft malicious links that redirect authenticated users to arbitrary websites when clicking on a specially constructed link hosted on a trusted domain.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://packetstorm.news/files/id/190179/; https://www.kseniasecurity.com/; https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-url-redirection-vulnerability
CVE: CVE-2025-15113
Published: 2025-12-30
Description: Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-256, CWE-522
References: https://packetstorm.news/files/id/190178/; https://www.kseniasecurity.com/; https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-remote-code-execution-via-mpfs-upload
CVE: CVE-2025-15114
Published: 2025-12-30
Description: Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security measures and disable the alarm system without additional authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-403, CWE-668
References: https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-pin-exposure-vulnerability; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5929.php; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5929.php
CVE: CVE-2025-59131
Published: 2025-12-30
Description: Cross-Site Request Forgery (CSRF) vulnerability in hoernerfranz WP-CalDav2ICS wp-caldav2ics allows Stored XSS.This issue affects WP-CalDav2ICS: from n/a through <= 1.3.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/wp-caldav2ics/vulnerability/wordpress-wp-caldav2ics-plugin-1-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-62753
Published: 2025-12-30
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MadrasThemes MAS Videos masvideos allows PHP Local File Inclusion.This issue affects MAS Videos: from n/a through <= 1.3.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Plugin/masvideos/vulnerability/wordpress-mas-videos-plugin-1-3-2-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2025-11961
Published: 2025-12-31
Description: pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented.  If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
CVSS Score: 1.9 (LOW)
CWE: CWE-122, CWE-126
References: https://github.com/the-tcpdump-group/libpcap/commit/b2d2f9a9a0581c40780bde509f7cc715920f1c02
CVE: CVE-2025-11964
Published: 2025-12-31
Description: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
CVSS Score: 1.9 (LOW)
CWE: CWE-787
References: https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd[PII_REDACTED]0acb838e69
CVE: CVE-2025-15371
Published: 2025-12-31
Description: A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-259, CWE-798
References: https://github.com/vuln-1/vuln/blob/main/Tenda/i24v3.0_V3.0.0.8/report-1.md; https://vuldb.com/?ctiid.339075; https://vuldb.com/?id.339075
CVE: CVE-2025-68131
Published: 2025-12-31
Description: cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag (28) persist in memory and can be accessed by subsequent CBOR messages using the sharedref tag (29). This allows an attacker-controlled message to read data from previously decoded messages if the decoder is reused across trust boundaries. Version 5.8.0 patches the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-212
References: https://github.com/agronholm/cbor2/pull/268; https://github.com/agronholm/cbor2/security/advisories/GHSA-wcj4-jw5j-44wh; https://github.com/agronholm/cbor2/security/advisories/GHSA-wcj4-jw5j-44wh
CVE: CVE-2025-15223
Published: 2025-12-31
Description: A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure and makes clear that the product is "[f]or educational purposes only".
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://gitee.com/sun-huizhi/dazhi/issues/IDBUOY; https://vuldb.com/?ctiid.338608; https://vuldb.com/?id.338608
CVE: CVE-2025-15372
Published: 2025-12-31
Description: A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md; https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md#proof-of-concept; https://vuldb.com/?ctiid.339080
CVE: CVE-2025-15373
Published: 2025-12-31
Description: A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK; https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK#-span--strong-proof-of-concept---strong---span-; https://vuldb.com/?ctiid.339081
CVE: CVE-2025-15374
Published: 2025-12-31
Description: A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing a manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://note-hxlab.wetolink.com/share/LNickWiRaFiF; https://note-hxlab.wetolink.com/share/LNickWiRaFiF#-span--strong-proof-of-concept---strong---span-; https://vuldb.com/?ctiid.339082
CVE: CVE-2025-15375
Published: 2025-12-31
Description: A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502, CWE-502
References: https://note-hxlab.wetolink.com/share/2wLgcbKe9Toh; https://note-hxlab.wetolink.com/share/2wLgcbKe9Toh#-span--strong-proof-of-concept---strong---span-; https://vuldb.com/?ctiid.339083
CVE: CVE-2025-49346
Published: 2025-12-31
Description: Cross-Site Request Forgery (CSRF) vulnerability in peterwsterling Simple Archive Generator simple-archive-generator allows Stored XSS.This issue affects Simple Archive Generator: from n/a through <= 5.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/simple-archive-generator/vulnerability/wordpress-simple-archive-generator-plugin-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-59137
Published: 2025-12-31
Description: Cross-Site Request Forgery (CSRF) vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through <= 1.7.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/portfolio-manager-powered-by-behance/vulnerability/wordpress-behance-portfolio-manager-plugin-1-7-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-13029
Published: 2025-12-31
Description: The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/22344534-cd36-4817-b683-c0af55759e01/; https://wpscan.com/vulnerability/22344534-cd36-4817-b683-c0af55759e01/
CVE: CVE-2025-14434
Published: 2025-12-31
Description: The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upk_alex_grid_loadmore_posts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and retrieve rendered HTML content of private and unpublished ones.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/bf3c3193-fc9c-454b-ad4f-94ba1669a312/; https://wpscan.com/vulnerability/bf3c3193-fc9c-454b-ad4f-94ba1669a312/