rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-35872 
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:28:05.000Z
CVE-2020-35873 
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:27:54.000Z
CVE-2020-35874 
An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:27:43.000Z
CVE-2020-35875 
An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:27:32.000Z
CVE-2020-35876 
An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:27:20.000Z
CVE-2020-35877 
An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of out-of-bounds access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:27:08.000Z
CVE-2020-35878 
An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:26:58.000Z
CVE-2020-35879 
An issue was discovered in the rulinalg crate through 2020-02-11 for Rust. There are incorrect lifetime-boundary definitions for RowMut::raw_slice and RowMut::raw_slice_mut.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:26:47.000Z
CVE-2020-35880 
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:26:34.000Z
CVE-2020-35881 
An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:26:22.000Z
CVE-2020-35882 
An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:26:10.000Z
CVE-2020-35883 
An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:58.000Z
CVE-2020-35884 
An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:45.000Z
CVE-2020-35885 
An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:34.000Z
CVE-2020-35886 
An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:25.000Z
CVE-2020-35887 
An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:10.000Z
CVE-2020-35888 
An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:25:01.000Z
CVE-2020-35889 
An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:24:52.000Z
CVE-2020-35890 
An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:24:40.000Z
CVE-2020-35891 
An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:24:28.000Z
CVE-2020-35892 
An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:24:18.000Z
CVE-2020-35893 
An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:24:06.000Z
CVE-2020-35894 
An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:23:55.000Z
CVE-2020-35895 
An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:23:44.000Z
CVE-2020-35896 
An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:23:25.000Z
CVE-2020-35897 
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:23:13.000Z
CVE-2020-35898 
An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:23:03.000Z
CVE-2020-35899 
An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:22:55.000Z
CVE-2020-35900 
An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:22:44.000Z
CVE-2020-35901 
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:22:31.000Z
CVE-2020-35902 
An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:22:11.000Z
CVE-2020-35903 
An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:21:49.000Z
CVE-2020-35904 
An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and how many iterator elements there are.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:21:39.000Z
CVE-2020-35905 
An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:21:25.000Z
CVE-2020-35906 
An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:21:15.000Z
CVE-2020-35907 
An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:58.000Z
CVE-2020-35908 
An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:46.000Z
CVE-2020-35909 
An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:32.000Z
CVE-2020-35910 
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:21.000Z
CVE-2020-35911 
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:12.000Z
CVE-2020-35912 
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:20:03.000Z
CVE-2020-35913 
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:19:55.000Z
CVE-2020-35914 
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:19:47.000Z
CVE-2020-35915 
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:18:59.000Z
CVE-2020-35916 
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always correct.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:18:49.000Z
CVE-2020-35917 
An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:18:37.000Z
CVE-2020-35918 
An issue was discovered in the branca crate before 0.10.0 for Rust. Decoding tokens (with invalid base62 data) can panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:18:21.000Z
CVE-2020-35919 
An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:18:10.000Z
CVE-2020-35920 
An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:17:48.000Z
CVE-2020-35921 
An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:17:39.000Z
CVE-2020-35922 
An issue was discovered in the mio crate before 0.7.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:17:30.000Z
CVE-2020-35923 
An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:17:18.000Z
CVE-2020-35924 
An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex<T> allows cross-thread sending of a non-Send type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:16:55.000Z
CVE-2020-35925 
An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:16:44.000Z
CVE-2020-35926 
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:16:30.000Z
CVE-2020-35927 
An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:16:17.000Z
CVE-2020-35928 
An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T08:16:02.000Z
CVE-2020-35929 
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.
Problem types: description: Information Disclosure (ID)
Affected products: vendor: Kaspersky
product: TinyCheck
Published: 2021-01-19T16:53:36.000Z
CVE-2020-35930 
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T19:09:17.000Z
CVE-2020-35931 
An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subtype entry of the Annotation dictionary, in an incremental update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T20:14:11.000Z
CVE-2020-35932 
Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline_edits] parameter. NOTE: exploitability depends on PHP objects that might be present with certain other plugins or themes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:24:25.000Z
CVE-2020-35933 
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options parameter, or a base64-encoded JSON string containing JavaScript in the encoded_options parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:C/UI:R
version: 3.1
Published: 2021-01-01T01:24:35.000Z
CVE-2020-35934 
The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). This is a security problem if this object stores information that the user is not supposed to have (e.g., custom metadata added by a different plugin).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:05.000Z
CVE-2020-35935 
The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is enabled. (The mechanism for deciding whether a user was entitled to add a role did not work in various custom-role scenarios.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:14.000Z
CVE-2020-35936 
Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:23.000Z
CVE-2020-35937 
Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to team_import_xml_layouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:32.000Z
CVE-2020-35938 
PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:40.000Z
CVE-2020-35939 
PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to team_import_xml_layouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-01-01T01:25:47.000Z
CVE-2020-35942 
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading to Remote Code Execution and XSS. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T17:49:23.000Z
CVE-2020-35943 
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T17:49:27.000Z
CVE-2020-35944 
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
version: 3.1
Published: 2021-01-01T03:28:58.000Z