stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-21488 (severity: HIGH, weakness: CWE-284)
Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips.
CVE-2023-21489 (severity: MEDIUM, weakness: CWE-787)
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVE-2023-2149 (severity: CRITICAL, weakness: CWE-89)
A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability affects unknown code of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226270 is the identifier assigned to this vulnerability.
CVE-2023-21490 (severity: HIGH, weakness: CWE-284)
Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager.
CVE-2023-21491 (severity: HIGH, weakness: CWE-284)
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
CVE-2023-21492 (severity: MEDIUM, weakness: CWE-532)
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVE-2023-21493 (severity: MEDIUM, weakness: CWE-284)
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data.
CVE-2023-21494 (severity: CRITICAL, weakness: CWE-20)
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVE-2023-21495 (severity: MEDIUM, weakness: CWE-284)
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.
CVE-2023-21496 (severity: MEDIUM, weakness: CWE-489)
Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level.
CVE-2023-21497 (severity: HIGH, weakness: CWE-134)
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
CVE-2023-21498 (severity: HIGH, weakness: CWE-20)
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.
CVE-2023-21499 (severity: HIGH, weakness: CWE-787)
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVE-2023-2150 (severity: HIGH, weakness: CWE-89)
A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue affects some unknown processing of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226271.
CVE-2023-21500 (severity: MEDIUM, weakness: CWE-415)
Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory.
CVE-2023-21501 (severity: HIGH, weakness: CWE-20)
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVE-2023-21502 (severity: HIGH, weakness: CWE-20)
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
CVE-2023-21503 (severity: CRITICAL, weakness: CWE-20)
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVE-2023-21504 (severity: CRITICAL, weakness: CWE-20)
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVE-2023-21505 (severity: HIGH, weakness: CWE-285)
Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox.
CVE-2023-21506 (severity: HIGH, weakness: CWE-787)
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
CVE-2023-21507 (severity: MEDIUM, weakness: CWE-125)
Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.
CVE-2023-21508 (severity: HIGH, weakness: CWE-787)
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
CVE-2023-21509 (severity: HIGH, weakness: CWE-787)
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
CVE-2023-2151 (severity: CRITICAL, weakness: CWE-89)
A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file manage_student.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226272.
CVE-2023-21510 (severity: MEDIUM, weakness: CWE-125)
Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.
CVE-2023-21511 (severity: MEDIUM, weakness: CWE-125)
Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.
CVE-2023-21512 (severity: LOW, weakness: CWE-269)
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission.
CVE-2023-21513 (severity: MEDIUM, weakness: CWE-269)
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition.
CVE-2023-21514 (severity: HIGH, weakness: CWE-20)
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
CVE-2023-21515 (severity: HIGH, weakness: CWE-20)
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
CVE-2023-21516 (severity: CRITICAL, weakness: CWE-20)
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
CVE-2023-21517 (severity: CRITICAL, weakness: CWE-120)
Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.
CVE-2023-21518 (severity: HIGH, weakness: CWE-284)
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity.
CVE-2023-2152 (severity: CRITICAL, weakness: CWE-73)
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226273 was assigned to this vulnerability.
CVE-2023-21520 (severity: MEDIUM, weakness: NVD-CWE-Other)
A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization.
CVE-2023-21521 (severity: HIGH, weakness: CWE-89)
An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.
CVE-2023-21522 (severity: MEDIUM, weakness: CWE-79)
A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in the victim's browser then they can execute script commands in the context of the affected user account.
CVE-2023-21523 (severity: MEDIUM, weakness: CWE-79)
A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.
CVE-2023-21524 (severity: HIGH, weakness: CWE-798)
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2023-21525 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-21526 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Netlogon Information Disclosure Vulnerability
CVE-2023-21527 (severity: HIGH, weakness: CWE-191)
Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21528 (severity: HIGH, weakness: CWE-122)
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-21529 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-2153 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php of the component POST Parameter Handler. The manipulation of the argument value with the input 1><script>alert(666)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226274 is the identifier assigned to this vulnerability.
CVE-2023-21531 (severity: HIGH, weakness: CWE-284)
Azure Service Fabric Container Elevation of Privilege Vulnerability
CVE-2023-21532 (severity: HIGH, weakness: CWE-416)
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-21535 (severity: HIGH, weakness: CWE-591)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21536 (severity: MEDIUM, weakness: CWE-125)
Event Tracing for Windows Information Disclosure Vulnerability
CVE-2023-21537 (severity: HIGH, weakness: CWE-367)
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2023-21538 (severity: HIGH, weakness: CWE-502)
.NET Denial of Service Vulnerability
CVE-2023-21539 (severity: HIGH, weakness: CWE-125)
Windows Authentication Remote Code Execution Vulnerability
CVE-2023-2154 (severity: HIGH, weakness: CWE-89)
A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/?page=reminders/view_reminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226275.
CVE-2023-21540 (severity: MEDIUM, weakness: CWE-20)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-21541 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2023-21542 (severity: HIGH, weakness: CWE-59)
Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21543 (severity: HIGH, weakness: CWE-400)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21546 (severity: HIGH, weakness: CWE-591)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21547 (severity: HIGH, weakness: CWE-476)
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVE-2023-21548 (severity: HIGH, weakness: CWE-591)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21549 (severity: HIGH, weakness: CWE-285)
Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-2155 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=save_cargo_type. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226276.
CVE-2023-21550 (severity: MEDIUM, weakness: CWE-20)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-21551 (severity: HIGH, weakness: CWE-416)
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21552 (severity: HIGH, weakness: CWE-416)
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-21553 (severity: HIGH, weakness: CWE-94)
Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-21554 (severity: CRITICAL, weakness: CWE-20)
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-21555 (severity: HIGH, weakness: CWE-367)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21556 (severity: HIGH, weakness: CWE-191)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21557 (severity: CRITICAL, weakness: CWE-190)
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2023-21558 (severity: HIGH, weakness: CWE-20)
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-21559 (severity: MEDIUM, weakness: CWE-20)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-2156 (severity: HIGH, weakness: CWE-617)
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.
CVE-2023-21560 (severity: MEDIUM, weakness: CWE-122)
Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-21561 (severity: HIGH, weakness: CWE-190)
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21563 (severity: MEDIUM, weakness: NVD-CWE-Other)
BitLocker Security Feature Bypass Vulnerability
CVE-2023-21564 (severity: HIGH, weakness: CWE-79)
Azure DevOps Server Cross-Site Scripting Vulnerability
CVE-2023-21565 (severity: HIGH, weakness: CWE-79)
Azure DevOps Server Spoofing Vulnerability
CVE-2023-21566 (severity: HIGH, weakness: CWE-73)
Visual Studio Elevation of Privilege Vulnerability
CVE-2023-21567 (severity: MEDIUM, weakness: CWE-59)
Visual Studio Denial of Service Vulnerability
CVE-2023-21568 (severity: HIGH, weakness: CWE-502)
Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
CVE-2023-21569 (severity: MEDIUM, weakness: CWE-94)
Azure DevOps Server Spoofing Vulnerability
CVE-2023-2157 (severity: MEDIUM, weakness: CWE-122)
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
CVE-2023-21570 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21571 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21572 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21573 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21574 (severity: HIGH, weakness: CWE-20)
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21575 (severity: HIGH, weakness: CWE-787)
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21576 (severity: HIGH, weakness: CWE-787)
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21577 (severity: MEDIUM, weakness: CWE-125)
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21578 (severity: MEDIUM, weakness: CWE-125)
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21579 (severity: HIGH, weakness: CWE-190)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-2158 (severity: CRITICAL, weakness: CWE-321)
Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by crafting a custom "Remember Me" token. This is possible due to the use of a hard-coded cipher which was used when generating the token. A malicious actor who creates this token can supply it to a separate Code Dx system, provided they know the username they want to impersonate, and impersonate the user. Score 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
CVE-2023-21581 (severity: MEDIUM, weakness: CWE-125)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21582 (severity: HIGH, weakness: CWE-787)
Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21583 (severity: MEDIUM, weakness: CWE-125)
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21584 (severity: MEDIUM, weakness: CWE-416)
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21585 (severity: MEDIUM, weakness: CWE-125)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21586 (severity: MEDIUM, weakness: CWE-476)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21587 (severity: HIGH, weakness: CWE-122)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21588 (severity: HIGH, weakness: CWE-20)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21589 (severity: HIGH, weakness: CWE-787)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-2159 (severity: MEDIUM, weakness: NVD-CWE-Other)
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thus bypassing the plugin's provided feature.