deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-21673
Published: 2023-10-03
Description: Improper Access to the VM resource manager can lead to Memory Corruption.
CVSS Score: 8.7 (HIGH)
CWE: CWE-284
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-22382
Published: 2023-10-03
Description: Weak configuration in Automotive while VM is processing a listener request from TEE.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-22384
Published: 2023-10-03
Description: Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-22385
Published: 2023-10-03
Description: Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24843
Published: 2023-10-03
Description: Transient DOS in Modem while triggering a camping on an 5G cell.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24844
Published: 2023-10-03
Description: Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24847
Published: 2023-10-03
Description: Transient DOS in Modem while allocating DSM items.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24848
Published: 2023-10-03
Description: Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24849
Published: 2023-10-03
Description: Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24850
Published: 2023-10-03
Description: Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24853
Published: 2023-10-03
Description: Memory Corruption in HLOS while registering for key provisioning notify.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-24855
Published: 2023-10-03
Description: Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-823, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-28539
Published: 2023-10-03
Description: Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-28540
Published: 2023-10-03
Description: Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-28571
Published: 2023-10-03
Description: Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33026
Published: 2023-10-03
Description: Transient DOS in WLAN Firmware while parsing a NAN management frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-400
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33027
Published: 2023-10-03
Description: Transient DOS in WLAN Firmware while parsing rsn ies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33028
Published: 2023-10-03
Description: Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33029
Published: 2023-10-03
Description: Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33034
Published: 2023-10-03
Description: Memory corruption while parsing the ADSP response command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-195, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33035
Published: 2023-10-03
Description: Memory corruption while invoking callback function of AFE from ADSP.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-33039
Published: 2023-10-03
Description: Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
CVE: CVE-2023-3655
Published: 2023-10-03
Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network.

CVSS Score: 7.5 (HIGH)
CWE: CWE-749
References: https://doi.org/10.35011/ww2q-d522; https://www.cashit.at/; https://doi.org/10.35011/ww2q-d522
CVE: CVE-2023-3656
Published: 2023-10-03
Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-749, CWE-94
References: https://doi.org/10.35011/ww2q-d522; https://www.cashit.at/; https://doi.org/10.35011/ww2q-d522
CVE: CVE-2023-44217
Published: 2023-10-03
Description: 
A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.


CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013; https://github.com/advisories/GHSA-jw5c-8746-98g5; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013
CVE: CVE-2023-44218
Published: 2023-10-03
Description: 
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.


CVSS Score: 8.8 (HIGH)
CWE: CWE-267
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014
CVE: CVE-2023-3654
Published: 2023-10-03
Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

CVSS Score: 9.4 (CRITICAL)
CWE: CWE-346, CWE-346
References: https://doi.org/10.35011/ww2q-d522; https://www.cashit.at/; https://doi.org/10.35011/ww2q-d522
CVE: CVE-2023-37891
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.0.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/exit-intent-popups-by-optimonk/wordpress-exit-popups-onsite-retargeting-by-optimonk-plugin-2-0-4-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/exit-intent-popups-by-optimonk/wordpress-exit-popups-onsite-retargeting-by-optimonk-plugin-2-0-4-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-37991
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Monchito.Net WP Emoji One plugin <= 0.6.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-emoji-one/wordpress-wp-emoji-one-plugin-0-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-emoji-one/wordpress-wp-emoji-one-plugin-0-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-37992
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/smarty-for-wordpress/wordpress-smarty-for-wordpress-plugin-3-1-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/smarty-for-wordpress/wordpress-smarty-for-wordpress-plugin-3-1-35-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-37996
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-37998
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Saas Disabler allows Cross Site Request Forgery.This issue affects Disabler: from n/a through 3.0.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/disabler/wordpress-disabler-plugin-3-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/disabler/wordpress-disabler-plugin-3-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-38381
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-FlyBox plugin <= 6.46 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-flybox/wordpress-wp-flybox-plugin-6-46-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-flybox/wordpress-wp-flybox-plugin-6-46-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-46841
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/oxygen/wordpress-oxygen-builder-plugin-4-6-2-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/oxygen/wordpress-oxygen-builder-plugin-4-6-2-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-0828
Published: 2023-10-03
Description: Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/; https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE: CVE-2023-24518
Published: 2023-10-03
Description: A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/; https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE: CVE-2023-25463
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-tell-a-friend-popup-form/wordpress-wp-tell-a-friend-popup-form-plugin-7-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-tell-a-friend-popup-form/wordpress-wp-tell-a-friend-popup-form-plugin-7-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-37990
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Mike Perelink Pro plugin <= 2.1.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/perelink/wordpress-perelink-pro-plugin-2-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/perelink/wordpress-perelink-pro-plugin-2-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-38390
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Anshul Labs Mobile Address Bar Changer plugin <= 3.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/mobile-address-bar-changer/wordpress-mobile-address-bar-changer-plugin-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mobile-address-bar-changer/wordpress-mobile-address-bar-changer-plugin-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-38396
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/google-map-shortcode/wordpress-google-map-shortcode-plugin-3-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/google-map-shortcode/wordpress-google-map-shortcode-plugin-3-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-38398
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Taboola plugin <= 2.0.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/taboola/wordpress-taboola-plugin-2-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/taboola/wordpress-taboola-plugin-2-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-4097
Published: 2023-10-03
Description: The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE: CVE-2022-47891
Published: 2023-10-03
Description: All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups; https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE: CVE-2022-47892
Published: 2023-10-03
Description: All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-319
References: https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups; https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE: CVE-2022-47893
Published: 2023-10-03
Description: There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups; https://www.incibe.es/incibe-cert/alerta-temprana/avisos-sci/multiples-vulnerabilidades-netman-204-riello-ups
CVE: CVE-2023-25989
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/meks-audio-player/wordpress-meks-audio-player-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/meks-easy-ads-widget/wordpress-meks-easy-ads-widget-plugin-2-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/meks-easy-instagram-widget/wordpress-meks-easy-photo-feed-widget-plugin-1-2-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-2830
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/testimonial-widgets/wordpress-wp-testimonials-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/testimonial-widgets/wordpress-wp-testimonials-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-39165
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/sign-up-sheets/wordpress-sign-up-sheets-plugin-2-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sign-up-sheets/wordpress-sign-up-sheets-plugin-2-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-39917
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-2-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-2-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-39923
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/the-post-grid/wordpress-the-post-grid-plugin-7-2-7-cross-site-request-forgery-csrf-leading-to-css-change-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/the-post-grid/wordpress-the-post-grid-plugin-7-2-7-cross-site-request-forgery-csrf-leading-to-css-change-vulnerability?_s_id=cve
CVE: CVE-2023-39989
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/header-footer-code-manager/wordpress-header-footer-code-manager-plugin-1-1-34-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/header-footer-code-manager/wordpress-header-footer-code-manager-plugin-1-1-34-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-40210
Published: 2023-10-03
Description: Cross-Site Request Forgery (CSRF) vulnerability in Sean Barton (Tortoise IT) SB Child List plugin <= 4.5 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/sb-child-list/wordpress-sb-child-list-plugin-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sb-child-list/wordpress-sb-child-list-plugin-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve