deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34144
Published: 2023-06-26
Description: An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-34145.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US; https://www.zerodayinitiative.com/advisories/ZDI-23-835/; https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US
CVE: CVE-2023-34145
Published: 2023-06-26
Description: An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-34144.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US; https://www.zerodayinitiative.com/advisories/ZDI-23-836/; https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US
CVE: CVE-2023-34146
Published: 2023-06-26
Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-34147 and CVE-2023-34148.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US; https://www.zerodayinitiative.com/advisories/ZDI-23-832/; https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US
CVE: CVE-2023-34147
Published: 2023-06-26
Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34148.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US; https://www.zerodayinitiative.com/advisories/ZDI-23-833/; https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US
CVE: CVE-2023-34148
Published: 2023-06-26
Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34147.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-863
References: https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US; https://www.zerodayinitiative.com/advisories/ZDI-23-834/; https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US
CVE: CVE-2023-35164
Published: 2023-06-26
Description: DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing authorization check allows unauthorized users to manipulate a dashboard created by the administrator. This vulnerability has been fixed in version 1.18.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/dataease/dataease/security/advisories/GHSA-grxm-fc3h-3qgj; https://github.com/dataease/dataease/security/advisories/GHSA-grxm-fc3h-3qgj
CVE: CVE-2023-35695
Published: 2023-06-26
Description: A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US; https://www.tenable.com/security/research/tra-2023-17; https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US
CVE: CVE-2023-30945
Published: 2023-06-26
Description: Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-287, CWE-22
References: https://palantir.safebase.us/?tcuUid=e62e4dad-b39b-48ba-ba30-7b7c83406ad9; https://palantir.safebase.us/?tcuUid=e62e4dad-b39b-48ba-ba30-7b7c83406ad9
CVE: CVE-2023-22834
Published: 2023-06-27
Description: The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.
CVSS Score: 2.7 (LOW)
CWE: CWE-425, CWE-862
References: https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9f4c48a56ff8; https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9f4c48a56ff8
CVE: CVE-2023-3371
Published: 2023-06-27
Description: The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler' and 'display_password_form' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt and view the password protected content.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-321
References: https://plugins.trac.wordpress.org/browser/embedpress/tags/3.7.3/EmbedPress/Includes/Classes/Helper.php#L231; https://plugins.trac.wordpress.org/browser/embedpress/tags/3.7.3/EmbedPress/Includes/Classes/Helper.php#L278; https://plugins.trac.wordpress.org/browser/embedpress/tags/3.7.3/Gutenberg/block-backend/block-embedpress.php#L30
CVE: CVE-2023-3132
Published: 2023-06-27
Description: The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including the entire installations database if a backup occurs and the deletion of the back-up files fail.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2923512%40mainwp-child&new=2923512%40mainwp-child&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/a1fadba1-674f-4f3d-997f-d29d3a887414?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2923512%40mainwp-child&new=2923512%40mainwp-child&sfp_email=&sfph_mail=
CVE: CVE-2023-3411
Published: 2023-06-27
Description: The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajax_store_save() function. This makes it possible for unauthenticated attackers to modify plugin settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410; https://www.wordfence.com/threat-intel/vulnerabilities/id/63e108f4-5d9d-4bcf-aef9-aa856f4241ea?source=cve; https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410
CVE: CVE-2023-3412
Published: 2023-06-27
Description: The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajax_store_save() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify plugin settings and inject malicious web scripts.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410; https://www.wordfence.com/threat-intel/vulnerabilities/id/b58403df-af09-4d74-88e6-140e3f2f291b?source=cve; https://plugins.trac.wordpress.org/browser/image-map-pro-lite/trunk/image-map-pro-wordpress-lite.php#L410
CVE: CVE-2023-3423
Published: 2023-06-27
Description: Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-521
References: https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/7d4dab[PII_REDACTED]3b7be120afe9bd14983ae3bc; https://huntr.dev/bounties/dd19c7d0-70f1-4d86-a552-611dfa8e0139; https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/7d4dab[PII_REDACTED]3b7be120afe9bd14983ae3bc
CVE: CVE-2023-34395
Published: 2023-06-27
Description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider.
In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution.
Starting version 4.0.0 driver can be set only from the hook constructor.
This issue affects Apache Airflow ODBC Provider: before 4.0.0.


CVSS Score: 7.8 (HIGH)
CWE: CWE-88, CWE-88
References: https://github.com/apache/airflow/pull/31713; https://lists.apache.org/thread/l26yykftzbhc9tgcph8cso88bc2lqwwd; https://github.com/apache/airflow/pull/31713
CVE: CVE-2023-35798
Published: 2023-06-27
Description: Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.

This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.

It is recommended to upgrade to a version that is not affected


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/apache/airflow/pull/31984; https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pj; https://github.com/apache/airflow/pull/31984
CVE: CVE-2021-30203
Published: 2023-06-27
Description: A reflected cross-site scripting (XSS) vulnerability in the zero parameter of dzzoffice 2.02.1_SC_UTF8 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zyx0814/dzzoffice/issues/183; https://github.com/zyx0814/dzzoffice/issues/183
CVE: CVE-2021-30205
Published: 2023-06-27
Description: Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenticated attackers to browse departments and usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/zyx0814/dzzoffice/issues/184; https://github.com/zyx0814/dzzoffice/issues/184
CVE: CVE-2022-4115
Published: 2023-06-27
Description: The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability targeting higher privileged users.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/2b5071e1-9532-4a6c-9da4-d07932474ca4; https://wpscan.com/vulnerability/2b5071e1-9532-4a6c-9da4-d07932474ca4
CVE: CVE-2023-0588
Published: 2023-06-27
Description: The Catalyst Connect Zoho CRM Client Portal WordPress plugin before 2.1.0 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/84be272e-0891-461c-91ad-496b64f92f8f; https://wpscan.com/vulnerability/84be272e-0891-461c-91ad-496b64f92f8f
CVE: CVE-2023-0873
Published: 2023-06-27
Description: The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/8816d4c1-9e8e-4b6f-a36a-10a98a7ccfcd; https://wpscan.com/vulnerability/8816d4c1-9e8e-4b6f-a36a-10a98a7ccfcd
CVE: CVE-2023-1166
Published: 2023-06-27
Description: The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/825eccf9-f351-4a5b-b[PII_REDACTED]b94fa; https://wpscan.com/vulnerability/825eccf9-f351-4a5b-b[PII_REDACTED]b94fa
CVE: CVE-2023-1891
Published: 2023-06-27
Description: The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/4e5d993f-cc20-4b5f-b4c8-c[PII_REDACTED]; https://wpscan.com/vulnerability/4e5d993f-cc20-4b5f-b4c8-c[PII_REDACTED]
CVE: CVE-2023-2032
Published: 2023-06-27
Description: The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Injection vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/17acde5d-44ea-4e77-8670-260d22e28ffe; https://wpscan.com/vulnerability/17acde5d-44ea-4e77-8670-260d22e28ffe
CVE: CVE-2023-2068
Published: 2023-06-27
Description: The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html; https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056; http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html
CVE: CVE-2023-2178
Published: 2023-06-27
Description: The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/e84b71f9-4208-4efb-90e8-1c778e7d2ebb; https://wpscan.com/vulnerability/e84b71f9-4208-4efb-90e8-1c778e7d2ebb
CVE: CVE-2023-2326
Published: 2023-06-27
Description: The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugin through 1.3.5 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/f922695a-b803-4edf-aadc-80c79d99bebb; https://wpscan.com/vulnerability/f922695a-b803-4edf-aadc-80c79d99bebb
CVE: CVE-2023-2482
Published: 2023-06-27
Description: The Responsive CSS EDITOR WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/c0f73781-be7e-482e-91de-ad7991ad4bd5; https://wpscan.com/vulnerability/c0f73781-be7e-482e-91de-ad7991ad4bd5
CVE: CVE-2023-2580
Published: 2023-06-27
Description: The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/7ee1efb1-9969-40b2-8ab2-ea427091bbd8; https://wpscan.com/vulnerability/7ee1efb1-9969-40b2-8ab2-ea427091bbd8
CVE: CVE-2023-2592
Published: 2023-06-27
Description: The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/d4298960-eaba-4185-a730-3e621d9680e1; https://wpscan.com/vulnerability/d4298960-eaba-4185-a730-3e621d9680e1
CVE: CVE-2023-2601
Published: 2023-06-27
Description: The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/173732/WordPress-WP-Brutal-AI-Cross-Site-Request-Forgery-SQL-Injection.html; https://wpscan.com/vulnerability/[PII_REDACTED]-bf5e-44ec1d59f5fd; http://packetstormsecurity.com/files/173732/WordPress-WP-Brutal-AI-Cross-Site-Request-Forgery-SQL-Injection.html
CVE: CVE-2023-2605
Published: 2023-06-27
Description: The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: http://packetstormsecurity.com/files/173734/WordPress-WP-Brutal-AI-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/372cb940-71ba-4d19-b35a-ab15f8c2fdeb; http://packetstormsecurity.com/files/173734/WordPress-WP-Brutal-AI-Cross-Site-Scripting.html
CVE: CVE-2023-2623
Published: 2023-06-27
Description: The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user data, allowing low privilege users such as subscriber to retrieve sensitive information such as the user email and hashed password of other users
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/85cc39b1-416f-4d23-84c1-fdcbffb0dda0; https://wpscan.com/vulnerability/85cc39b1-416f-4d23-84c1-fdcbffb0dda0
CVE: CVE-2023-2624
Published: 2023-06-27
Description: The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrator
CVSS Score: 6.1 (MEDIUM)
References: http://packetstormsecurity.com/files/174895/WordPress-KiviCare-3.2.0-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/dc3a841d-a95b-462e-be4b-acaa44e77264; http://packetstormsecurity.com/files/174895/WordPress-KiviCare-3.2.0-Cross-Site-Scripting.html
CVE: CVE-2023-2627
Published: 2023-06-27
Description: The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, allowing any authenticated users, such as subscriber to call them. Attacks include but are not limited to: Add arbitrary Clinic Admin/Doctors/etc and update plugin's settings
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/162d0029-2adc-4925-9985-1d5d672dbe75; https://wpscan.com/vulnerability/162d0029-2adc-4925-9985-1d5d672dbe75
CVE: CVE-2023-2628
Published: 2023-06-27
Description: The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update various users (patients, doctors etc)
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/e0741e2c-c529-4815-8744-16e01cdb0aed; https://wpscan.com/vulnerability/e0741e2c-c529-4815-8744-16e01cdb0aed
CVE: CVE-2023-2711
Published: 2023-06-27
Description: The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/71c5b5b5-8694-4738-8e4b-8670a8d21c86; https://wpscan.com/vulnerability/71c5b5b5-8694-4738-8e4b-8670a8d21c86
CVE: CVE-2023-2743
Published: 2023-06-27
Description: The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/517c6aa4-a56d-4f13-b370-7c864dd9c7db; https://wpscan.com/vulnerability/517c6aa4-a56d-4f13-b370-7c864dd9c7db
CVE: CVE-2023-2744
Published: 2023-06-27
Description: The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
CVSS Score: 7.2 (HIGH)
References: http://packetstormsecurity.com/files/175106/WordPress-WP-ERP-1.12.2-SQL-Injection.html; https://wpscan.com/vulnerability/435da8a1-9955-46d7-a508-b5738259e731; http://packetstormsecurity.com/files/175106/WordPress-WP-ERP-1.12.2-SQL-Injection.html
CVE: CVE-2023-2795
Published: 2023-06-27
Description: The CodeColorer WordPress plugin before 0.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/2d6ecd21-3dd4-423d-80e7-277c45080a9f; https://wpscan.com/vulnerability/2d6ecd21-3dd4-423d-80e7-277c45080a9f
CVE: CVE-2023-2842
Published: 2023-06-27
Description: The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack
CVSS Score: 8.1 (HIGH)
References: https://wpscan.com/vulnerability/0357ecc7-56f5-4843-a928-bf2d3ce75596; https://wpscan.com/vulnerability/0357ecc7-56f5-4843-a928-bf2d3ce75596