deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2413
Published: 2024-01-16
Description: The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2e38b1bb-4410-45e3-87ca-d47a2cce9e22/; https://wpscan.com/vulnerability/2e38b1bb-4410-45e3-87ca-d47a2cce9e22/
CVE: CVE-2022-3194
Published: 2024-01-16
Description: The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/85e32913-dc2a-44c9-addd-7abde618e995/; https://wpscan.com/vulnerability/85e32913-dc2a-44c9-addd-7abde618e995/
CVE: CVE-2022-3604
Published: 2024-01-16
Description: The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://wpscan.com/vulnerability/300ebfcd-c500-464e-b919-acfeb72593de/; https://wpscan.com/vulnerability/300ebfcd-c500-464e-b919-acfeb72593de/
CVE: CVE-2022-3739
Published: 2024-01-16
Description: The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as Author to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b9f39ced-1e0f-4559-b861-39ddcbcd1249/; https://wpscan.com/vulnerability/b9f39ced-1e0f-4559-b861-39ddcbcd1249/
CVE: CVE-2022-3764
Published: 2024-01-16
Description: The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/; https://wpscan.com/vulnerability/9d49df6b-e2f1-4662-90d2-84c29c3b1cb0/
CVE: CVE-2022-3829
Published: 2024-01-16
Description: The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/684941ad-541f-43f9-a7ef-d26c0f4e6e21/; https://wpscan.com/vulnerability/684941ad-541f-43f9-a7ef-d26c0f4e6e21/
CVE: CVE-2022-3836
Published: 2024-01-16
Description: The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/64e144fb-aa9f-4cfe-9c44-a4e1fa2e8dd5/; https://wpscan.com/vulnerability/64e144fb-aa9f-4cfe-9c44-a4e1fa2e8dd5/
CVE: CVE-2022-3899
Published: 2024-01-16
Description: The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will delete any number of files or directories on the target server by tricking a logged in admin into submitting a form.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/e3131e16-a0eb-4d26-b6d3-048fc1f1e9fa/; https://wpscan.com/vulnerability/e3131e16-a0eb-4d26-b6d3-048fc1f1e9fa/
CVE: CVE-2023-0079
Published: 2024-01-16
Description: The Customer Reviews for WooCommerce WordPress plugin before 5.17.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fdaba4d1-950d-4512-95de-cd43fe9e73e5/; https://wpscan.com/vulnerability/fdaba4d1-950d-4512-95de-cd43fe9e73e5/
CVE: CVE-2023-0094
Published: 2024-01-16
Description: The UpQode Google Maps WordPress plugin through 1.0.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1453471f-164d-4487-a736-8cea086212fe/; https://wpscan.com/vulnerability/1453471f-164d-4487-a736-8cea086212fe/
CVE: CVE-2023-0224
Published: 2024-01-16
Description: The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform SQL Injection attacks
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://givewp.com/core-2-24-0-vulnerability-patched/; https://wpscan.com/vulnerability/d8da539d-0a1b-46ef-b48d-710c59cf68e1/; https://givewp.com/core-2-24-0-vulnerability-patched/
CVE: CVE-2023-0376
Published: 2024-01-16
Description: The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b1aa6f32-c1d5-4fc6-9a4e-d4c5fae78389/; https://wpscan.com/vulnerability/b1aa6f32-c1d5-4fc6-9a4e-d4c5fae78389/
CVE: CVE-2023-0389
Published: 2024-01-16
Description: The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/090a3922-febc-4294-82d2-d8339d461893/; https://wpscan.com/vulnerability/090a3922-febc-4294-82d2-d8339d461893/
CVE: CVE-2023-0479
Published: 2024-01-16
Description: The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/50963747-ae8e-42b4-bb42-cc848be7b92e/; https://wpscan.com/vulnerability/50963747-ae8e-42b4-bb42-cc848be7b92e/
CVE: CVE-2023-0769
Published: 2024-01-16
Description: The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1d4a2f0e-a371-4e27-98de-528e070f41b0/; https://wpscan.com/vulnerability/1d4a2f0e-a371-4e27-98de-528e070f41b0/
CVE: CVE-2023-0824
Published: 2024-01-16
Description: The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged-in admin add Stored XSS payloads via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/48a3a542-9130-4524-9d19-ff9eccecb148/; https://wpscan.com/vulnerability/48a3a542-9130-4524-9d19-ff9eccecb148/
CVE: CVE-2023-1405
Published: 2024-01-16
Description: The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/8c727a31-ff65-4472-8191-b1becc08192a/; https://wpscan.com/vulnerability/8c727a31-ff65-4472-8191-b1becc08192a/
CVE: CVE-2023-2252
Published: 2024-01-16
Description: The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://wpscan.com/vulnerability/9da6eede-10d0-4609-8b97-4a5d38fa8e69/; https://wpscan.com/vulnerability/9da6eede-10d0-4609-8b97-4a5d38fa8e69/
CVE: CVE-2023-2655
Published: 2024-01-16
Description: The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/b3f2d38f-8eeb-45e9-bb58-2957e416e1cd/; https://wpscan.com/vulnerability/b3f2d38f-8eeb-45e9-bb58-2957e416e1cd/
CVE: CVE-2023-37521
Published: 2024-01-16
Description: HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack.

CVSS Score: 2.3 (LOW)
CWE: CWE-922
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE: CVE-2023-37522
Published: 2024-01-16
Description: HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser. 

CVSS Score: 5.6 (MEDIUM)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109754
CVE: CVE-2023-3178
Published: 2024-01-16
Description: The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/5341cb5d-d204-49e1-b013-f[PII_REDACTED]f/; https://wpscan.com/vulnerability/5341cb5d-d204-49e1-b013-f[PII_REDACTED]f/
CVE: CVE-2023-3211
Published: 2024-01-16
Description: The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/873824f0-e8b1-45bd-8579-bc3c649a54e5/; https://wpscan.com/vulnerability/873824f0-e8b1-45bd-8579-bc3c649a54e5/
CVE: CVE-2023-3372
Published: 2024-01-16
Description: The Lana Shortcodes WordPress plugin before 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3396b734-9a10-4070-802d-f9d01cc6eb74/; https://wpscan.com/vulnerability/3396b734-9a10-4070-802d-f9d01cc6eb74/
CVE: CVE-2023-3647
Published: 2024-01-16
Description: The IURNY by INDIGITALL WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6df05333-b1f1-4324-a1ba-dd36fbf1778c/; https://wpscan.com/vulnerability/6df05333-b1f1-4324-a1ba-dd36fbf1778c/
CVE: CVE-2023-3771
Published: 2024-01-16
Description: The T1 WordPress theme through 19.0 is vulnerable to unauthenticated open redirect with which any attacker and redirect users to arbitrary websites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/7c6fc499-de09-4874-ab96-bdc24d550cfb/; https://wpscan.com/vulnerability/7c6fc499-de09-4874-ab96-bdc24d550cfb/
CVE: CVE-2023-45229
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to an out-of-bounds read
 vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45230
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119, CWE-119
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45231
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to an out-of-bounds read
 vulnerability when processing  Neighbor Discovery Redirect message. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45232
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45233
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45234
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119, CWE-119
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45235
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to a buffer overflow vulnerability when





handling Server ID option 



 from a DHCPv6 proxy Advertise message. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119, CWE-119
References: http://packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.html; http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
CVE: CVE-2023-45236
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200, CWE-338
References: http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-45237
Published: 2024-01-16
Description: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-338, CWE-338
References: http://www.openwall.com/lists/oss-security/2024/01/16/2; https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-4536
Published: 2024-01-16
Description: The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/80e0e21c-9e6e-406d-b598-18eb222b3e3e/; https://wpscan.com/vulnerability/80e0e21c-9e6e-406d-b598-18eb222b3e3e/
CVE: CVE-2023-4703
Published: 2024-01-16
Description: The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the password of an Admin user leads to privilege escalation.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/83278bbb-90e6-4465-a46d-60b4c703c11a/; https://wpscan.com/vulnerability/83278bbb-90e6-4465-a46d-60b4c703c11a/
CVE: CVE-2023-4757
Published: 2024-01-16
Description: The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape data returned from the LDAP server before rendering it in the page, allowing users who can control their entries in the LDAP directory to inject malicious javascript which could be used against high-privilege users such as a site admin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0b953413-cf41-4de7-ac1f-c6cb995fb158/; https://wpscan.com/vulnerability/0b953413-cf41-4de7-ac1f-c6cb995fb158/
CVE: CVE-2023-4797
Published: 2024-01-16
Description: The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://wpscan.com/vulnerability/de169fc7-f388-4abb-ab94-12522fd1ac92/; https://wpscan.com/vulnerability/de169fc7-f388-4abb-ab94-12522fd1ac92/
CVE: CVE-2023-5558
Published: 2024-01-16
Description: The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4efd2a4d-89bd-472f-ba5a-f9944fd4dd16/; https://wpscan.com/vulnerability/4efd2a4d-89bd-472f-ba5a-f9944fd4dd16/
CVE: CVE-2023-5922
Published: 2024-01-16
Description: The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and REST endpoint, currently disabled in the plugin) have the right to do so, allowing unauthenticated users to access arbitrary draft, private and password protected posts/pages content
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/debd8498-5770-4270-9ee1-1503e675ef34/; https://wpscan.com/vulnerability/debd8498-5770-4270-9ee1-1503e675ef34/
CVE: CVE-2023-6005
Published: 2024-01-16
Description: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-116
References: https://wpscan.com/vulnerability/fa4eea26-0611-4fa8-a947-f78ddf46a56a/; https://wpscan.com/vulnerability/fa4eea26-0611-4fa8-a947-f78ddf46a56a/
CVE: CVE-2023-6046
Published: 2024-01-16
Description: The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored HTML Injection attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/97f1d403-ae96-4c90-8d47-9822f4d68033/; https://wpscan.com/vulnerability/97f1d403-ae96-4c90-8d47-9822f4d68033/
CVE: CVE-2023-6292
Published: 2024-01-16
Description: The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d4cf799e-2571-4b96-a303-78dcafbfcf40/; https://wpscan.com/vulnerability/d4cf799e-2571-4b96-a303-78dcafbfcf40/
CVE: CVE-2023-6373
Published: 2024-01-16
Description: The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor (or above)
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/afc11c92-a7c5-4e55-8f34-f2235438bd1b/; https://wpscan.com/vulnerability/afc11c92-a7c5-4e55-8f34-f2235438bd1b/
CVE: CVE-2023-6592
Published: 2024-01-16
Description: The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files.
CVSS Score: 5.3 (MEDIUM)
References: https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exploit/; https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/; https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exploit/
CVE: CVE-2023-6732
Published: 2024-01-16
Description: The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/aaf91707-f03b-4f25-bca9-9fac4945002a/; https://wpscan.com/vulnerability/aaf91707-f03b-4f25-bca9-9fac4945002a/