rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-33882 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:12.419Z
CVE-2023-33883 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:13.352Z
CVE-2023-33884 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:16.759Z
CVE-2023-33885 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:18.044Z
CVE-2023-33886 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:18.987Z
CVE-2023-33887 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:20.228Z
CVE-2023-33888 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:21.174Z
CVE-2023-33889 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:23.808Z
CVE-2023-33890 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:25.104Z
CVE-2023-33891 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:26.028Z
CVE-2023-33892 
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001
default_status: unaffected
Published: 2023-07-12T08:32:28.019Z
CVE-2023-33893 
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002
default_status: unaffected
Published: 2023-07-12T08:32:30.156Z
CVE-2023-33894 
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003
default_status: unaffected
Published: 2023-07-12T08:32:32.224Z
CVE-2023-33895 
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004
default_status: unaffected
Published: 2023-07-12T08:32:33.475Z
CVE-2023-33896 
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005
default_status: unaffected
Published: 2023-07-12T08:32:34.427Z
CVE-2023-33897 
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006
default_status: unaffected
Published: 2023-07-12T08:32:35.422Z
CVE-2023-33898 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:31:58.025Z
CVE-2023-33899 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:31:59.323Z
CVE-2023-33900 
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:03.423Z
CVE-2023-33901 
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:36.431Z
CVE-2023-33902 
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:38.316Z
CVE-2023-33903 
In FM service, there is a possible missing params check.  This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001
default_status: unaffected
Published: 2023-07-12T08:32:39.455Z
CVE-2023-33904 
In hci_server, there is a possible out of bounds read due to a missing bounds check.  This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:42.431Z
CVE-2023-33905 
In iwnpi server, there is a possible out of bounds write due to a missing bounds check.  This could lead to local denial of service with System execution privileges needed.
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-07-12T08:32:43.939Z
CVE-2023-33906 
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:43.488Z
CVE-2023-33907 
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:43.812Z
CVE-2023-33908 
In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:44.098Z
CVE-2023-33909 
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:44.402Z
CVE-2023-33910 
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:44.692Z
CVE-2023-33911 
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-08-07T01:54:44.992Z
CVE-2023-33912 
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:45.355Z
CVE-2023-33913 
In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-08-07T01:54:46.257Z
CVE-2023-33914 
In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:12.851Z
CVE-2023-33915 
In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:13.120Z
CVE-2023-33916 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:00.948Z
CVE-2023-33917 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:01.230Z
CVE-2023-33918 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:01.516Z
CVE-2023-33919 
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Siemens
product: CP-8031 MASTER MODULE
default_status: unknown
vendor: Siemens
product: CP-8050 MASTER MODULE
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.2
baseSeverity: HIGH
Published: 2023-06-13T08:17:18.755Z
CVE-2023-33920 
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash of the root password in a hard-coded form, which could be exploited for UART console login to the device. An attacker with direct physical access could exploit this vulnerability.
Problem types: cwe_id: CWE-798
description: CWE-798: Use of Hard-coded Credentials
Affected products: vendor: Siemens
product: CP-8031 MASTER MODULE
default_status: unknown
vendor: Siemens
product: CP-8050 MASTER MODULE
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 6.8
baseSeverity: MEDIUM
Published: 2023-06-13T08:17:19.819Z
CVE-2023-33921 
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to login to the device.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: Siemens
product: CP-8031 MASTER MODULE
default_status: unknown
vendor: Siemens
product: CP-8050 MASTER MODULE
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 6.8
baseSeverity: MEDIUM
Published: 2023-06-13T08:17:20.886Z
CVE-2023-33922 WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Elementor
product: Elementor Website Builder
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Rafie Muhammad (Patchstack)
Published: 2024-06-11T09:17:29.261Z
CVE-2023-33923 Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes
Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: HashThemes
product: Viral News
default_status: unaffected
vendor: HashThemes
product: Viral
default_status: unaffected
vendor: HashThemes
product: HashOne
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Dave Jong (Patchstack)
Published: 2024-03-25T04:46:03.396Z
CVE-2023-33924 WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Felix Welberg
product: SIS Handball
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
version: 3.1
Credits: lang: en
value: Mika (Patchstack Alliance)
Published: 2023-11-06T08:05:34.285Z
CVE-2023-33925 WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: PluginForage
product: WooCommerce Product Categories Selection Widget
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Nguyen Xuan Chien (Patchstack Alliance)
Published: 2023-07-25T12:42:37.448Z
CVE-2023-33926 WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Supsystic
product: Easy Google Maps
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
version: 3.1
Credits: lang: en
value: Nguyen Xuan Chien (Patchstack Alliance)
Published: 2023-05-28T19:00:51.539Z
CVE-2023-33927 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple Page Generator Plugin – MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.3.19.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Themeisle
product: Multiple Page Generator Plugin – MPG
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
version: 3.1
Credits: lang: en
value: LEE SE HYOUNG (Patchstack Alliance)
Published: 2023-10-31T14:12:51.537Z
CVE-2023-33928 WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.0.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: WebToffee
product: WordPress Backup & Migration
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Abdi Pranata (Patchstack Alliance)
Published: 2024-12-13T14:23:30.275Z
CVE-2023-33929 WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Joaquín Ruiz
product: Easy Admin Menu
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Rio Darmawan (Patchstack Alliance)
Published: 2023-08-30T12:52:14.997Z