deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-2912
Published: 2025-03-28
Description: A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file src/H5Omessage.c. The manipulation of the argument oh leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5370; https://vuldb.com/?ctiid.301885; https://vuldb.com/?id.301885
CVE: CVE-2025-2913
Published: 2025-03-28
Description: A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file src/H5FL.c. The manipulation of the argument H5FL_blk_head_t leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-416, CWE-416
References: https://github.com/HDFGroup/hdf5/issues/5376; https://vuldb.com/?ctiid.301886; https://vuldb.com/?id.301886
CVE: CVE-2025-2914
Published: 2025-03-28
Description: A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5379; https://vuldb.com/?ctiid.301887; https://vuldb.com/?id.301887
CVE: CVE-2025-2915
Published: 2025-03-28
Description: A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5380; https://vuldb.com/?ctiid.301888; https://vuldb.com/?id.301888
CVE: CVE-2025-2916
Published: 2025-03-28
Description: A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This issue affects some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the argument File leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZOKEYE/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.301889; https://vuldb.com/?id.301889
CVE: CVE-2025-2917
Published: 2025-03-28
Description: A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function readFile of the file /dev-api/cms/file/read. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://r0ot.notion.site/ChestnutCMS-1-5-3-Arbitrary-file-read-vulnerability-1ae27d744f7f8074a169ca849e8a1d31?pvs=4; https://vuldb.com/?ctiid.301890; https://vuldb.com/?id.301890
CVE: CVE-2025-2919
Published: 2025-03-28
Description: A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-489, CWE-1313
References: https://scoozi.substack.com/p/hacking-a-netis-wf-2404-router-with; https://vuldb.com/?ctiid.301894; https://vuldb.com/?id.301894
CVE: CVE-2025-2920
Published: 2025-03-28
Description: A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The manipulation leads to use of weak hash. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.0 (LOW)
CWE: CWE-327, CWE-328
References: https://scoozi.substack.com/p/hacking-a-netis-wf-2404-router-cont; https://vuldb.com/?ctiid.301895; https://vuldb.com/?id.301895
CVE: CVE-2025-2921
Published: 2025-03-28
Description: A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-1393
References: https://scoozi.substack.com/p/hacking-a-netis-wf-2404-router-cont; https://vuldb.com/?ctiid.301896; https://vuldb.com/?id.301896
CVE: CVE-2025-31162
Published: 2025-03-28
Description: Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-369
References: https://sourceforge.net/p/mcj/tickets/185/; https://lists.debian.org/debian-lts-announce/2025/04/msg00030.html
CVE: CVE-2025-31163
Published: 2025-03-28
Description: Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: https://sourceforge.net/p/mcj/tickets/186/; https://lists.debian.org/debian-lts-announce/2025/04/msg00030.html
CVE: CVE-2025-31164
Published: 2025-03-28
Description: heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-122
References: https://sourceforge.net/p/mcj/tickets/184/; https://lists.debian.org/debian-lts-announce/2025/04/msg00030.html
CVE: CVE-2025-2922
Published: 2025-03-28
Description: A vulnerability classified as problematic was found in Netis WF-2404 1.1.124EN. Affected by this vulnerability is an unknown functionality of the component BusyBox Shell. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.0 (LOW)
CWE: CWE-310, CWE-312
References: https://scoozi.substack.com/p/hacking-a-netis-wf-2404-router-with; https://vuldb.com/?ctiid.301897; https://vuldb.com/?id.301897
CVE: CVE-2025-2923
Published: 2025-03-28
Description: A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5F_addr_encode_len of the file src/H5Fint.c. The manipulation of the argument pp leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5381; https://vuldb.com/?ctiid.301898; https://vuldb.com/?id.301898
CVE: CVE-2025-2924
Published: 2025-03-28
Description: A vulnerability, which was classified as problematic, was found in HDF5 up to 1.14.6. This affects the function H5HL__fl_deserialize of the file src/H5HLcache.c. The manipulation of the argument free_block leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5382; https://vuldb.com/?ctiid.301899; https://vuldb.com/?id.301899
CVE: CVE-2025-2925
Published: 2025-03-28
Description: A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-415, CWE-415
References: https://github.com/HDFGroup/hdf5/issues/5383; https://vuldb.com/?ctiid.301900; https://vuldb.com/?id.301900
CVE: CVE-2025-2926
Published: 2025-03-28
Description: A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-404, CWE-476, CWE-476
References: https://github.com/HDFGroup/hdf5/issues/5384; https://vuldb.com/?ctiid.301901; https://vuldb.com/?id.301901
CVE: CVE-2024-24292
Published: 2025-03-28
Description: A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9; https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9
CVE: CVE-2024-38985
Published: 2025-03-28
Description: janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() method at setIn (lib/index.js:90). This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/32c0a48023036e51918f6a098f21953d; https://github.com/janryWang/depath/issues/11; https://gist.github.com/mestrtee/32c0a48023036e51918f6a098f21953d
CVE: CVE-2024-38988
Published: 2025-03-28
Description: alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://gist.github.com/mestrtee/4c5dfb66bea377889c44dd6c8af28713; https://gist.github.com/mestrtee/4c5dfb66bea377889c44dd6c8af28713
CVE: CVE-2024-56975
Published: 2025-03-28
Description: InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Upload controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/InvoicePlane/InvoicePlane/pull/1127; https://github.com/InvoicePlane/InvoicePlane/pull/1166
CVE: CVE-2024-57083
Published: 2025-03-28
Description: A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/Redocly/redoc/issues/2499; https://github.com/Redocly/redoc/issues/2499
CVE: CVE-2024-6875
Published: 2025-03-28
Description: A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://access.redhat.com/security/cve/CVE-2024-6875; https://bugzilla.redhat.com/show_bug.cgi?id=2298555
CVE: CVE-2025-22953
Published: 2025-03-28
Description: A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024. The injection is specifically in the filter parameter of the JsonFetcher.svc endpoint. An attacker can exploit this vulnerability by injecting malicious SQL payloads into the filter parameter, enabling the unauthorized execution of arbitrary SQL commands on the backend database. If certain features (like xp_cmdshell) are enabled, this may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/maliktawfiq/CVE-2025-22953; https://tinted-hollyhock-92d.notion.site/EPICOR-HCM-Unauthenticated-Blind-SQL-Injection-CVE-2025-22953-170f1fdee211803988d1c9255a8cb904?pvs=4; https://www.epiusers.help/t/alert-hcm-security-patch/124777
CVE: CVE-2025-28254
Published: 2025-03-28
Description: Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions().
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Leantime/leantime/blob/0e7ddbbe3d582f657a1dddfef7b3419ae588cbf7/app/Domain/Notifications/Services/Notifications.php#L128; https://github.com/Leantime/leantime/commit/ce1d2073e4601183e1bdd90f4b433d16aee46a50; https://github.com/Leantime/leantime/security/advisories/GHSA-95j3-435g-vjcp
CVE: CVE-2025-28256
Published: 2025-03-28
Description: An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/ZackSecurity/VulnerReport/blob/cve/totolink/A3100R/1.md; https://github.com/ZackSecurity/VulnerReport/blob/cve/totolink/A3100R/1.md
CVE: CVE-2025-2927
Published: 2025-03-28
Description: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Rain1er/report/blob/main/CDG/Mg%3D%3D.md; https://vuldb.com/?ctiid.301902; https://vuldb.com/?id.301902
CVE: CVE-2024-23338
Published: 2025-03-28
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-53427. Reason: This candidate is a duplicate of CVE-2024-53427. Notes: All CVE users should reference CVE-2024-53427 instead of this candidate.
CVE: CVE-2024-58128
Published: 2025-03-28
Description: In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks via a global menu link.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/33a1eb66408e16a7535b2bae48303efd9501a26a; https://github.com/MISP/MISP/releases/tag/v2.4.193
CVE: CVE-2024-58129
Published: 2025-03-28
Description: In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/09a43870e733f79ffa33753ddc7bce3cbb5a5647; https://github.com/MISP/MISP/releases/tag/v2.4.193
CVE: CVE-2024-58130
Published: 2025-03-28
Description: In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/f08a2eaec25f0212c22b225c0b654bd60d089ef9; https://github.com/MISP/MISP/releases/tag/v2.4.193
CVE: CVE-2025-25579
Published: 2025-03-28
Description: TOTOLINK A3002R V4.0.0-B20[PII_REDACTED] is vulnerable to Command Injection in /bin/boa via bandstr.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://gist.github.com/regainer27/0abf6f56eae3fa2826d2551e22c2ace3; https://github.com/regainer27/totolink_A3002R_remote_command_exec; https://github.com/regainer27/totolink_A3002R_remote_command_exec
CVE: CVE-2025-28087
Published: 2025-03-28
Description: Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.yuque.com/morysummer/vx41bz/vxhdpdeavzvtvdqq; https://www.yuque.com/morysummer/vx41bz/vxhdpdeavzvtvdqq
CVE: CVE-2025-28089
Published: 2025-03-28
Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://github.com/magicblack/maccms10/releases/tag/v2025.1000.4047; https://www.yuque.com/morysummer/vx41bz/wzer7qxh0vwrf6zq; https://www.yuque.com/morysummer/vx41bz/wzer7qxh0vwrf6zq
CVE: CVE-2025-28090
Published: 2025-03-28
Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/xo5w1euakvtgenex; https://www.yuque.com/morysummer/vx41bz/xo5w1euakvtgenex
CVE: CVE-2025-28091
Published: 2025-03-28
Description: maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/ax55rxv4u3our1ic; https://www.yuque.com/morysummer/vx41bz/xo5w1euakvtgenex
CVE: CVE-2025-28092
Published: 2025-03-28
Description: ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/stggvmlxs9ewqlvu; https://www.yuque.com/morysummer/vx41bz/stggvmlxs9ewqlvu
CVE: CVE-2025-28093
Published: 2025-03-28
Description: ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/he2hb8ic8an8h07f; https://www.yuque.com/morysummer/vx41bz/he2hb8ic8an8h07f
CVE: CVE-2025-28094
Published: 2025-03-28
Description: shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-918
References: https://www.yuque.com/morysummer/vx41bz/echzollcdlmllgqo; https://www.yuque.com/morysummer/vx41bz/echzollcdlmllgqo
CVE: CVE-2025-28096
Published: 2025-03-28
Description: OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465; https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465
CVE: CVE-2025-28097
Published: 2025-03-28
Description: OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465
CVE: CVE-2025-2781
Published: 2025-03-28
Description: The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.



This issue affects Mobile VPN with SSL Client: from 11.0 through 12.11.
CWE: CWE-276
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004
CVE: CVE-2025-2782
Published: 2025-03-28
Description: The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.



This issue affects Terminal Services Agent: from 12.0 through 12.10.
CWE: CWE-276
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00005
CVE: CVE-2024-43186
Published: 2025-03-29
Description: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-256
References: https://www.ibm.com/support/pages/node/7184980
CVE: CVE-2024-51477
Published: 2025-03-29
Description: IBM InfoSphere Information Server 11.7 

could allow an authenticated to obtain sensitive username information due to an observable response discrepancy.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://www.ibm.com/support/pages/node/7185058
CVE: CVE-2024-7577
Published: 2025-03-29
Description: IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://www.ibm.com/support/pages/node/7185020
CVE: CVE-2025-1217
Published: 2025-03-29
Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.
CVSS Score: 3.1 (LOW)
CWE: CWE-20, CWE-436
References: https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g; https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-13557
Published: 2025-03-29
Description: The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://unitedthemes.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e4ca7dad-bfe2-443e-b575-362d8ff93242?source=cve
CVE: CVE-2025-2006
Published: 2025-03-29
Description: The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This may be exploitable by unauthenticated attackers when the "Allow guest users without accounts to create topics and replies" setting is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/image-upload-for-bbpress/tags/1.1.19/bbp-image-upload.php#L136; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3264738%40image-upload-for-bbpress&new=3264738%40image-upload-for-bbpress&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/df09af41-399a-4878-8420-721f1198d895?source=cve