deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1369
Published: 2023-03-13
Description: A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 9.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222875.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-404
References: https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing; https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369; https://vuldb.com/?ctiid.222875
CVE: CVE-2022-47166
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/cf7-widget-elementor/wordpress-void-contact-form-7-widget-for-elementor-page-builder-plugin-2-1-1-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/cf7-widget-elementor/wordpress-void-contact-form-7-widget-for-elementor-page-builder-plugin-2-1-1-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2022-47440
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/my-tickets/wordpress-my-tickets-plugin-1-9-10-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/my-tickets/wordpress-my-tickets-plugin-1-9-10-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-0628
Published: 2023-03-13
Description: Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://docs.docker.com/desktop/release-notes/#4170; https://docs.docker.com/desktop/release-notes/#4170
CVE: CVE-2023-0629
Published: 2023-03-13
Description: Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This would not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket).

The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges.
This issue has been fixed in Docker Desktop 4.17.0. 

Affected Docker Desktop versions: from 4.13.0 before 4.17.0.


CVSS Score: 7.1 (HIGH)
CWE: CWE-424, CWE-501
References: https://docs.docker.com/desktop/release-notes/#4170; https://docs.docker.com/desktop/release-notes/#4170
CVE: CVE-2023-24033
Published: 2023-03-13
Description: The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html; https://semiconductor.samsung.com/processor/modem/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2023-25283
Published: 2023-03-13
Description: A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20%20in%20reserveDHCP_HostName_1.1.1.0; https://www.dlink.com/en/security-bulletin/; https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20%20in%20reserveDHCP_HostName_1.1.1.0
CVE: CVE-2023-26072
Published: 2023-03-13
Description: An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Emergency number list.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/171378/Shannon-Baseband-NrmmMsgCodec-Emergency-Number-List-Heap-Buffer-Overflow.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=2395; https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
CVE: CVE-2023-1372
Published: 2023-03-13
Description: The WH Testimonials  plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh_homepage, wh_text_short, wh_text_full and in versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://danielkelley.me/wh-testimonials-reflected-xss-vulnerability-via-wh-homepage-parameter-in-version-3-0-0-and-below/; https://plugins.trac.wordpress.org/browser/wh-testimonials/trunk/wh-testimonials.php#L177; https://www.wordfence.com/threat-intel/vulnerabilities/id/b6fe5f1a-787e-4662-915f-c6f04961e194?source=cve
CVE: CVE-2023-1374
Published: 2023-03-13
Description: The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://danielkelley.me/solidres-hotel-booking-plugin-for-wordpress-post-based-xss-vulnerability-in-add-new-currency-feature/; https://plugins.trac.wordpress.org/browser/solidres/trunk/admin/currencies/edit.php#L15; https://www.wordfence.com/threat-intel/vulnerabilities/id/b13ee51b-9f23-428f-9cef-4a9b9b06b0c4?source=cve
CVE: CVE-2023-24577
Published: 2023-03-13
Description: McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html; https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view; https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
CVE: CVE-2023-24578
Published: 2023-03-13
Description: McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html; https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view; https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
CVE: CVE-2023-24579
Published: 2023-03-13
Description: McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html; https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view; https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
CVE: CVE-2023-26074
Published: 2023-03-13
Description: An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123.. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding operator-defined access category definitions.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/171383/Shannon-Baseband-NrmmMsgCodec-Access-Category-Definitions-Heap-Buffer-Overflow.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=2397; https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
CVE: CVE-2022-31474
Published: 2023-03-13
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy/; https://patchstack.com/database/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-download-vulnerability?_s_id=cve; https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy/
CVE: CVE-2022-38074
Published: 2023-03-13
Description: SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/wp-statistics/wordpress-wp-statistics-plugin-13-2-10-multiple-authenticated-sql-injection-vulnerabilities?_s_id=cve; https://patchstack.com/database/vulnerability/wp-statistics/wordpress-wp-statistics-plugin-13-2-10-multiple-authenticated-sql-injection-vulnerabilities?_s_id=cve
CVE: CVE-2023-0978
Published: 2023-03-13
Description: 
A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10397; https://kcm.trellix.com/corporate/index?page=content&id=SB10397
CVE: CVE-2023-24762
Published: 2023-03-13
Description: OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho; https://www.dlink.com/en/security-bulletin/; https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
CVE: CVE-2023-25991
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic plugin <= 5.1.9.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-and-user-login-plugin-plugin-5-1-9-2-multiple-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-and-user-login-plugin-plugin-5-1-9-2-multiple-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-26073
Published: 2023-03-13
Description: An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the extended emergency number list.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/171380/Shannon-Baseband-NrmmMsgCodec-Extended-Emergency-Number-List-Heap-Buffer-Overflow.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=2396; https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
CVE: CVE-2023-27061
Published: 2023-03-13
Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formWifiFilterRulesModify.md; https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formWifiFilterRulesModify.md
CVE: CVE-2023-27062
Published: 2023-03-13
Description: Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formPortalAuth.md; https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formPortalAuth.md
CVE: CVE-2023-27063
Published: 2023-03-13
Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formModifyDnsForward.md; https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formModifyDnsForward.md
CVE: CVE-2023-27064
Published: 2023-03-13
Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelDnsForward.md; https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelDnsForward.md
CVE: CVE-2023-27065
Published: 2023-03-13
Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelWewifiPic.md; https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelWewifiPic.md
CVE: CVE-2023-22700
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 9.3.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/pixelyoursite/wordpress-pixelyoursite-your-smart-pixel-tag-manager-plugin-9-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/pixelyoursite/wordpress-pixelyoursite-your-smart-pixel-tag-manager-plugin-9-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-23711
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in A2 Hosting A2 Optimized WP plugin <= 3.0.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/a2-optimized-wp/wordpress-a2-optimized-wp-plugin-3-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/a2-optimized-wp/wordpress-a2-optimized-wp-plugin-3-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-25973
Published: 2023-03-13
Description: Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3.0.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-26076
Published: 2023-03-13
Description: An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.
CVSS Score: 7.6 (HIGH)
CWE: CWE-120, CWE-120
References: http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html; https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html; https://semiconductor.samsung.com/processor/mobile-processor/
CVE: CVE-2023-27093
Published: 2023-03-13
Description: Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gitee.com/zhenfeng13/My-Blog/issues/I6GDTU; https://gitee.com/zhenfeng13/My-Blog/issues/I6GDTU
CVE: CVE-2022-4466
Published: 2023-03-13
Description: The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/497d0bf9-b750-4293-9662-1722a74442e2; https://wpscan.com/vulnerability/497d0bf9-b750-4293-9662-1722a74442e2
CVE: CVE-2022-4652
Published: 2023-03-13
Description: The Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/ebf3df99-6939-4ae9-ad55-004f33c1cfbc; https://wpscan.com/vulnerability/ebf3df99-6939-4ae9-ad55-004f33c1cfbc
CVE: CVE-2022-4661
Published: 2023-03-13
Description: The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b95956c9-40e5-47aa-86f6-e2da61b3c19f; https://wpscan.com/vulnerability/b95956c9-40e5-47aa-86f6-e2da61b3c19f
CVE: CVE-2023-0037
Published: 2023-03-13
Description: The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
References: https://bulletin.iese.de/post/wd-google-maps_1-0-72_1; https://wpscan.com/vulnerability/33ab1fe2-6611-4f43-91ba-52c56f02ed56; https://bulletin.iese.de/post/wd-google-maps_1-0-72_1
CVE: CVE-2023-0066
Published: 2023-03-13
Description: The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/545c9e2f-bacd-4f30-ae01-de1583e26d32; https://wpscan.com/vulnerability/545c9e2f-bacd-4f30-ae01-de1583e26d32
CVE: CVE-2023-0073
Published: 2023-03-13
Description: The Client Logo Carousel WordPress plugin through 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e5599968-a435-405a-8829-9840a2144987; https://wpscan.com/vulnerability/e5599968-a435-405a-8829-9840a2144987
CVE: CVE-2023-0172
Published: 2023-03-13
Description: The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd; https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd
CVE: CVE-2023-0219
Published: 2023-03-13
Description: The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/71662b72-311c-42db-86c5-a0276d25535c; https://wpscan.com/vulnerability/71662b72-311c-42db-86c5-a0276d25535c
CVE: CVE-2023-0477
Published: 2023-03-13
Description: The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/e5ef74a2-e04a-4a14-bd0e-d6910cd1c4b4; https://wpscan.com/vulnerability/e5ef74a2-e04a-4a14-bd0e-d6910cd1c4b4
CVE: CVE-2023-0538
Published: 2023-03-13
Description: The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4869fdc7-4fc7-4917-bc00-b6ced9ccc871; https://wpscan.com/vulnerability/4869fdc7-4fc7-4917-bc00-b6ced9ccc871
CVE: CVE-2023-0749
Published: 2023-03-13
Description: The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb; https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb