deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-50810
Published: 2024-11-08
Description: hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Hopetree/izone/issues/289
CVE: CVE-2024-50811
Published: 2024-11-08
Description: hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://github.com/Hopetree/izone/issues/290
CVE: CVE-2024-51055
Published: 2024-11-08
Description: An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/havok89/Hoosk/issues/66
CVE: CVE-2024-51211
Published: 2024-11-08
Description: SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id parameter, which can be manipulated by an attacker to inject arbitrary SQL commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kutsa1/My-CVE/tree/main/CVE-2024-51211
CVE: CVE-2024-51997
Published: 2024-11-08
Description: Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (**Attestation Results Token**) token, generated by AS, could be manipulated by MITM attacker, but the verifier (CoCo Verification Demander like KBS) could still verify it successfully. In the payload of ART token, the ‘jwk’ could be replaced by attacker with his own pub key. Then attacker can use his own corresponding private key to sign the crafted ART token. Based on current code implementation (v0.8.0), such replacement and modification can not be detected. This issue has been addressed in version 0.8.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://github.com/confidential-containers/trustee/security/advisories/GHSA-7jc6-j236-vvjw
CVE: CVE-2024-21994
Published: 2024-11-08
Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to a service crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-50808
Published: 2024-11-08
Description: SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://seacms.com; https://github.com/v9d0g/CVEs/blob/main/CVE-2024-50808.md
CVE: CVE-2024-50809
Published: 2024-11-08
Description: The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/v9d0g/CVEs/blob/main/CVE-2024-50809.md
CVE: CVE-2024-51157
Published: 2024-11-08
Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352
References: https://github.com/xiaoyunzhui/cms/blob/main/2/readme.md
CVE: CVE-2024-11026
Published: 2024-11-08
Description: A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument DEFAULT_KEYSTORE_PASSWORD with the input changeit leads to use of hard-coded password. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-255, CWE-259, CWE-798
References: https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20Keystore%20Password%5D%20found%20in%20FREENOW%20(ex%20Beat%20app)%2012.10.0%20-%20(SSL.java).md; https://vuldb.com/?ctiid.283544; https://vuldb.com/?id.283544
CVE: CVE-2024-27527
Published: 2024-11-08
Description: wasm3 139076a is vulnerable to Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://gist.github.com/haruki3hhh/5d2f3a216457aeef9f40331aca33be6e; https://github.com/wasm3/wasm3/issues/464
CVE: CVE-2024-27528
Published: 2024-11-08
Description: wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://gist.github.com/haruki3hhh/baa757c4af4fefb410d9c74d7a68152e; https://github.com/wasm3/wasm3/issues/463
CVE: CVE-2024-27529
Published: 2024-11-08
Description: wasm3 139076a contains memory leaks in Read_utf8.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://gist.github.com/haruki3hhh/ac70bd83b9c0ed1de6289d818488da78; https://github.com/wasm3/wasm3/issues/462
CVE: CVE-2024-27530
Published: 2024-11-08
Description: wasm3 139076a contains a Use-After-Free in ForEachModule.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://gist.github.com/haruki3hhh/94dd274487b58e037bcc8839dc88b203; https://github.com/wasm3/wasm3/issues/458
CVE: CVE-2024-27532
Published: 2024-11-08
Description: wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gist.github.com/haruki3hhh/e468ac3b3234f9bc42a9cc367457119a; https://github.com/bytecodealliance/wasm-micro-runtime/issues/3130
CVE: CVE-2024-35410
Published: 2024-11-08
Description: wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/f686e1d517e8f5d1281b02e633129522; https://github.com/kanaka/wac/issues/17
CVE: CVE-2024-35418
Published: 2024-11-08
Description: wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/29237c52bd0cc30e3cc906f0af221b09; https://github.com/kanaka/wac/issues/19
CVE: CVE-2024-35419
Published: 2024-11-08
Description: wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/8b9e1922083abef33a9024017eb2b9fe; https://github.com/kanaka/wac/issues/18
CVE: CVE-2024-35420
Published: 2024-11-08
Description: wac commit 385e1 was discovered to contain a heap overflow.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/ebabc705fb04aff38c600f2b63601aae; https://github.com/kanaka/wac/issues/20
CVE: CVE-2024-35421
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://gist.github.com/haruki3hhh/318c4e35531f9e3b01df51016ac5c12b; https://github.com/andoma/vmir/issues/22
CVE: CVE-2024-35422
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/21f9ad538db2a98e651cfe34ba4176f3; https://github.com/andoma/vmir/issues/23
CVE: CVE-2024-35423
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_wasm_parser.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://gist.github.com/haruki3hhh/32fd20583f2008e6b68caaaaf4ecf237; https://github.com/andoma/vmir/issues/18
CVE: CVE-2024-35424
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://gist.github.com/haruki3hhh/58fa3df36ca7d0c972c7481cf80ffd80; https://github.com/andoma/vmir/issues/21
CVE: CVE-2024-35425
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_function.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-653
References: https://gist.github.com/haruki3hhh/c64ff6431c71be1b08e15d4ff480ce6b; https://github.com/andoma/vmir/issues/19
CVE: CVE-2024-48073
Published: 2024-11-08
Description: sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://gist.github.com/Giles-one/56f677b96aab5a67fbe31dd41fd1303d; https://github.com/Giles-one/sunniwellHT3300PrivilegeEscalation
CVE: CVE-2024-35426
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://gist.github.com/haruki3hhh/9d2a5a139a8b[PII_REDACTED]3d0ba7338c; https://github.com/andoma/vmir/issues/24
CVE: CVE-2024-35427
Published: 2024-11-08
Description: vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://gist.github.com/haruki3hhh/1edba199c52039791bbcb33a5196c1c3; https://github.com/andoma/vmir/issues/20
CVE: CVE-2024-52000
Published: 2024-11-08
Description: Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site Scripting (XSS) exploit by way of editing a request's payload which can lead to malicious javascript execution. This issue has been addressed in version 3.2.0 via systematic escaping of error messages when rendering on the page. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-r58g-p5r9-8hfg
CVE: CVE-2024-52001
Published: 2024-11-08
Description: Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/Combodo/iTop/security/advisories/GHSA-9p26-v3wj-6q34
CVE: CVE-2024-52002
Published: 2024-11-08
Description: Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Combodo/iTop/security/advisories/GHSA-xr4x-xq7v-7gqm
CVE: CVE-2024-52004
Published: 2024-11-08
Description: MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has been prone to vulnerabilities that upon special cases can lead to remote code execution. All versions before v4.1.0 are susceptible, and users are highly recommended to upgrade. The vulnerabilities are related with insufficient input validation while uploading media content. The condition to exploit the vulnerability is that the portal allows users to upload content. This issue has been patched in version 4.1.0. There are no known workarounds for this vulnerability.
CWE: CWE-74
References: https://github.com/mediacms-io/mediacms/blob/main/docs/admins_docs.md; https://github.com/mediacms-io/mediacms/security/advisories/GHSA-x3p4-4442-q2c3
CVE: CVE-2024-52007
Published: 2024-11-08
Description: HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag ( <!DOCTYPE foo [<!ENTITY example SYSTEM "/etc/passwd"> ]> could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients can submit XML. This is related to GHSA-6cr6-ph3p-f5rf, in which its fix (#1571 & #1717) was incomplete. This issue has been addressed in release version 6.4.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j; https://cwe.mitre.org/data/definitions/611.html; https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
CVE: CVE-2024-52009
Published: 2024-11-08
Description: Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials (tokens `ghs_...`) when they are rotated. This enables an attacker able to read these logs to impersonate Atlantis application and to perform actions on GitHub. When Atlantis is used to administer a GitHub organization, this enables getting administration privileges on the organization. This was reported in #4060 and fixed in #4667 . The fix was included in Atlantis v0.30.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://argo-cd.readthedocs.io/en/stable/operator-manual/security; https://github.com/runatlantis/atlantis/issues/4060; https://github.com/runatlantis/atlantis/pull/4667
CVE: CVE-2024-10953
Published: 2024-11-09
Description: An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://aws.amazon.com/security/security-bulletins/AWS-2024-013; https://github.com/data-dot-all/dataall/releases/tag/v2.6.1; https://github.com/data-dot-all/dataall/security/advisories/GHSA-x4j5-jm65-vp5j
CVE: CVE-2024-52311
Published: 2024-11-09
Description: Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests until token is expired.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-613
References: https://aws.amazon.com/security/security-bulletins/AWS-2024-013; https://github.com/data-dot-all/dataall/releases/tag/v2.6.1; https://github.com/data-dot-all/dataall/security/advisories/GHSA-p69m-h9rw-584v
CVE: CVE-2024-52312
Published: 2024-11-09
Description: Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://aws.amazon.com/security/security-bulletins/AWS-2024-013; https://github.com/data-dot-all/dataall/releases/tag/v2.6.1; https://github.com/data-dot-all/dataall/security/advisories/GHSA-676j-g6g5-chj9
CVE: CVE-2024-52313
Published: 2024-11-09
Description: An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://aws.amazon.com/security/security-bulletins/AWS-2024-013; https://github.com/data-dot-all/dataall/releases/tag/v2.6.1; https://github.com/data-dot-all/dataall/security/advisories/GHSA-hx8q-7wxv-6c7c
CVE: CVE-2024-52314
Published: 2024-11-09
Description: A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all application logs in data.all via CloudWatch log scanning for particular operations that interact with customer producer teams data.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863
References: https://aws.amazon.com/security/security-bulletins/AWS-2024-013; https://github.com/data-dot-all/dataall/releases/tag/v2.6.1; https://github.com/data-dot-all/dataall/security/advisories/GHSA-p2h8-r28g-5q6h
CVE: CVE-2024-10284
Published: 2024-11-09
Description: The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0. This is due to hardcoded encryption key in the 'ce21_authentication_phrase' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://plugins.trac.wordpress.org/browser/ce21-suite/trunk/single-sign-on-ce21.php?rev=3097700#L242; https://plugins.trac.wordpress.org/changeset/3205463/ce21-suite#file3; https://www.wordfence.com/threat-intel/vulnerabilities/id/45d66743-300e-480d-98b8-99dc30b6e786?source=cve
CVE: CVE-2024-10285
Published: 2024-11-09
Description: The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/ce21-suite/trunk/single-sign-on-ce21.php?rev=3097700#L237; https://plugins.trac.wordpress.org/browser/ce21-suite/trunk/single-sign-on-ce21.php?rev=3097700#L281; https://www.wordfence.com/threat-intel/vulnerabilities/id/618a9ad7-3a13-43e6-84f4-35287f07e1c0?source=cve
CVE: CVE-2024-10294
Published: 2024-11-09
Description: The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ce21_single_sign_on_save_api_settings' function in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to change plugin settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ce21-suite/trunk/includes/ce21-functions.php?rev=3097700#L340; https://www.wordfence.com/threat-intel/vulnerabilities/id/cd6ce97c-fd80-4c43-a4d2-02aa91d11fac?source=cve
CVE: CVE-2024-10586
Published: 2024-11-09
Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/debug-tool/trunk/tools/image-puller.php#L120; https://www.wordfence.com/threat-intel/vulnerabilities/id/5e9d5c93-dcd7-450e-8c52-5c95fc5473d2?source=cve
CVE: CVE-2024-10588
Published: 2024-11-09
Description: The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to obtain information from phpinfo(). When WP_DEBUG is enabled, this can be exploited by unauthenticated users as well.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/debug-tool/trunk/tools/phpinfo.php#L43; https://www.wordfence.com/threat-intel/vulnerabilities/id/1b01991c-de16-43c4-bb11-c8730230ce51?source=cve
CVE: CVE-2024-10779
Published: 2024-11-09
Description: The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.0 via the 'ce_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://wordpress.org/plugins/cowidgets-elementor-addons/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ec005f9f-3f63-4d73-9bd5-dc9c4c4b8bfe?source=cve
CVE: CVE-2024-8960
Published: 2024-11-09
Description: The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/class-widgets-loader.php#L324; https://wordpress.org/plugins/cowidgets-elementor-addons/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/fac90d55-9ae2-48a8-b82b-fe1626556c7b?source=cve
CVE: CVE-2024-9262
Published: 2024-11-09
Description: The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.1 via the getUser() due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to obtain user meta values from form fields. Please note that this requires a site administrator to create a form that displays potentially sensitive information like password hashes. This may also be exploited by unauthenticated users if the  'user-meta-public-profile' shortcode is used insecurely.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/user-meta/trunk/models/classes/generate/PublicProfile.php#L28; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3221099%40user-meta&new=3221099%40user-meta&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/4ed81348-7604-4858-bc8e-b4504d77ee45?source=cve