deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-27600
Published: 2025-03-06
Description: FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/labring/FastGPT/security/advisories/GHSA-vc67-62v5-8cwx
CVE: CVE-2025-2036
Published: 2025-03-06
Description: A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument pro_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.298779; https://vuldb.com/?id.298779; https://vuldb.com/?submit.512405
CVE: CVE-2025-2037
Published: 2025-03-06
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_dashboard/delete_requester.php. The manipulation of the argument requester_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/SQL1.md; https://vuldb.com/?ctiid.298780
CVE: CVE-2025-25497
Published: 2025-03-06
Description: An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.
CVSS Score: 8.1 (HIGH)
CWE: CWE-602
References: https://helpdesk.netsweeper.com/docs/8_2_Docs/8_2_Netsweeper_Docs/Content/Release_Notes/Netsweeper_Release_Notes/8_2_Release_Notes/8_2_7_Release_and_Downloads.htm; https://packetstorm.news/files/id/188626/
CVE: CVE-2025-2038
Published: 2025-03-06
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-548, CWE-552, CWE-552
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/Directorylisting.md; https://vuldb.com/?ctiid.298781
CVE: CVE-2025-2039
Published: 2025-03-06
Description: A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/delete_members.php. The manipulation of the argument member_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/SQL4.md; https://vuldb.com/?ctiid.298782
CVE: CVE-2025-2040
Published: 2025-03-06
Description: A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-791, CWE-1336
References: https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md; https://vuldb.com/?ctiid.298783; https://vuldb.com/?id.298783
CVE: CVE-2024-57972
Published: 2025-03-06
Description: The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) through 10.0.22621.1244 allows remote attackers to cause a Denial of Service (resource consumption and device unusability) by sending many requests through the Device Portal framework.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/tania-silva/Hololens; https://github.com/tania-silva/Hololens
CVE: CVE-2025-25763
Published: 2025-03-06
Description: crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/J-0k3r/CVE-2025-25763; https://github.com/J-0k3r/sql/blob/main/sql.pdf
CVE: CVE-2025-2041
Published: 2025-03-06
Description: A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument p_cat leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.298784; https://vuldb.com/?id.298784; https://vuldb.com/?submit.512709
CVE: CVE-2025-2042
Published: 2025-03-06
Description: A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352
References: https://github.com/Jingyi-u/student-manage/tree/main; https://vuldb.com/?ctiid.298786; https://vuldb.com/?id.298786
CVE: CVE-2025-2043
Published: 2025-03-06
Description: A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#themes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/Jingyi-u/Pb-cms2/blob/main/README.md; https://vuldb.com/?ctiid.298787; https://vuldb.com/?id.298787
CVE: CVE-2025-2044
Published: 2025-03-06
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_bloodGroup.php. The manipulation of the argument blood_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/SQL5.md; https://vuldb.com/?ctiid.298789
CVE: CVE-2025-2046
Published: 2025-03-06
Description: A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/Hefei-Coffee/cve/issues/2; https://vuldb.com/?ctiid.298796; https://vuldb.com/?id.298796
CVE: CVE-2025-27598
Published: 2025-03-06
Description: ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/SixLabors/ImageSharp/issues/2859; https://github.com/SixLabors/ImageSharp/pull/2890; https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-2cmq-823j-5qj8
CVE: CVE-2025-2047
Published: 2025-03-06
Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument search leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/chenyihao-cyber/CVE/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.298797
CVE: CVE-2025-2049
Published: 2025-03-06
Description: A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://code-projects.org/; https://github.com/ABC-YOLO/cve/blob/main/xss45.md; https://vuldb.com/?ctiid.298800
CVE: CVE-2025-1121
Published: 2025-03-07
Description: Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code 
execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://issues.chromium.org/issues/b/336153054; https://issuetracker.google.com/issues/336153054; https://issuetracker.google.com/issues/336153054
CVE: CVE-2025-2050
Published: 2025-03-07
Description: A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/guttlefish/vul/issues/8; https://phpgurukul.com/; https://vuldb.com/?ctiid.298801
CVE: CVE-2025-2051
Published: 2025-03-07
Description: A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/guttlefish/vul/issues/9; https://phpgurukul.com/; https://vuldb.com/?ctiid.298804
CVE: CVE-2025-2052
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/guttlefish/vul/issues/10; https://phpgurukul.com/; https://vuldb.com/?ctiid.298805
CVE: CVE-2025-2053
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/guttlefish/vul/issues/11; https://phpgurukul.com/; https://vuldb.com/?ctiid.298806
CVE: CVE-2024-13526
Published: 2025-03-07
Description: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the export_submittion_attendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download list of attendees for any event.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.0.7.3/includes/class-ep-ajax.php#L1903; https://www.wordfence.com/threat-intel/vulnerabilities/id/2be578d9-27c3-4a16-a634-1514ed97a1a2?source=cve
CVE: CVE-2025-0748
Published: 2025-03-07
Description: The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]884-Changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/a35a66c6-2a86-4f6e-b28e-d79e13489a49?source=cve
CVE: CVE-2025-0749
Published: 2025-03-07
Description: The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]884-Changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve
CVE: CVE-2025-2054
Published: 2025-03-07
Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_state.php. The manipulation of the argument state_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/SQL6.md; https://vuldb.com/?ctiid.298807
CVE: CVE-2025-2057
Published: 2025-03-07
Description: A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/12T40910/CVE/issues/5; https://phpgurukul.com/; https://vuldb.com/?ctiid.298812
CVE: CVE-2025-2058
Published: 2025-03-07
Description: A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/12T40910/CVE/issues/4; https://phpgurukul.com/; https://vuldb.com/?ctiid.298813
CVE: CVE-2025-2059
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/booking-details.php. The manipulation of the argument ambulanceregnum leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/siznwaa/CVE/issues/4; https://phpgurukul.com/; https://vuldb.com/?ctiid.298814
CVE: CVE-2025-26708
Published: 2025-03-07
Description: There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuration of the ZTELink. An attacker can obtain unauthorized access to the WiFi service.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-327
References: https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/[PII_REDACTED]221570580
CVE: CVE-2025-2060
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/siznwaa/CVE/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.298815
CVE: CVE-2025-2061
Published: 2025-03-07
Description: A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/XSS2.md; https://vuldb.com/?ctiid.298816
CVE: CVE-2025-2062
Published: 2025-03-07
Description: A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/akjedfha/cve/issues/1; https://vuldb.com/?ctiid.298818; https://vuldb.com/?id.298818
CVE: CVE-2025-2063
Published: 2025-03-07
Description: A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/5; https://vuldb.com/?ctiid.298819; https://vuldb.com/?id.298819
CVE: CVE-2025-2064
Published: 2025-03-07
Description: A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/6; https://vuldb.com/?ctiid.298820; https://vuldb.com/?id.298820
CVE: CVE-2025-2065
Published: 2025-03-07
Description: A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/7; https://vuldb.com/?ctiid.298821; https://vuldb.com/?id.298821
CVE: CVE-2025-2066
Published: 2025-03-07
Description: A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/8; https://vuldb.com/?ctiid.298822; https://vuldb.com/?id.298822
CVE: CVE-2025-2067
Published: 2025-03-07
Description: A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/9; https://vuldb.com/?ctiid.298823; https://vuldb.com/?id.298823
CVE: CVE-2025-27795
Published: 2025-03-07
Description: ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: http://www.graphicsmagick.org/NEWS.html; https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/9bbae7314e3c3b19b830591010ed90bb136b9c42; https://github.com/libjxl/libjxl/issues/3792#issuecomment[PII_REDACTED]
CVE: CVE-2025-27796
Published: 2025-03-07
Description: ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-908
References: http://www.graphicsmagick.org/NEWS.html; https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3f9f; https://sourceforge.net/p/graphicsmagick/bugs/750/
CVE: CVE-2024-12809
Published: 2025-03-07
Description: The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wishlist/trunk/includes/classes/class-shortcodes.php?rev=3215801#L223; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242533%40wishlist&new=3242533%40wishlist&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251476%40wishlist&new=3251476%40wishlist&sfp_email=&sfph_mail=
CVE: CVE-2024-13320
Published: 2025-03-07
Description: The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the 'wc_filter_price_meta[where]' parameter in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://codecanyon.net/item/woocommerce-multi-currency/20948446; https://www.wordfence.com/threat-intel/vulnerabilities/id/6d359a5c-db11-416e-a329-c3ed67b1a925?source=cve