diff --git a/advisories/unreviewed/2024/02/GHSA-4v2m-666w-ffm3/GHSA-4v2m-666w-ffm3.json b/advisories/unreviewed/2024/02/GHSA-4v2m-666w-ffm3/GHSA-4v2m-666w-ffm3.json
index 06fdea6b91f..e1397d03127 100644
--- a/advisories/unreviewed/2024/02/GHSA-4v2m-666w-ffm3/GHSA-4v2m-666w-ffm3.json
+++ b/advisories/unreviewed/2024/02/GHSA-4v2m-666w-ffm3/GHSA-4v2m-666w-ffm3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4v2m-666w-ffm3",
-  "modified": "2024-06-03T18:55:29Z",
+  "modified": "2024-09-06T09:32:30Z",
   "published": "2024-02-05T18:31:37Z",
   "aliases": [
     "CVE-2024-0323"
@@ -28,6 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-1240",
       "CWE-327"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/09/GHSA-3whw-wqrp-r5hq/GHSA-3whw-wqrp-r5hq.json b/advisories/unreviewed/2024/09/GHSA-3whw-wqrp-r5hq/GHSA-3whw-wqrp-r5hq.json
new file mode 100644
index 00000000000..ad8910a162d
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-3whw-wqrp-r5hq/GHSA-3whw-wqrp-r5hq.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3whw-wqrp-r5hq",
+  "modified": "2024-09-06T09:32:30Z",
+  "published": "2024-09-06T09:32:30Z",
+  "aliases": [
+    "CVE-2024-7349"
+  ],
+  "details": "The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7349"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3139798/lifterlms/tags/7.7.6/includes/abstracts/abstract.llms.database.query.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3a096506-b18e-419c-808b-6099baa628ce?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T07:15:02Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-722x-w6hg-5675/GHSA-722x-w6hg-5675.json b/advisories/unreviewed/2024/09/GHSA-722x-w6hg-5675/GHSA-722x-w6hg-5675.json
new file mode 100644
index 00000000000..c0b0b94fb2a
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-722x-w6hg-5675/GHSA-722x-w6hg-5675.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-722x-w6hg-5675",
+  "modified": "2024-09-06T09:32:31Z",
+  "published": "2024-09-06T09:32:31Z",
+  "aliases": [
+    "CVE-2023-52916"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: aspeed: Fix memory overwrite if timing is 1600x900\n\nWhen capturing 1600x900, system could crash when system memory usage is\ntight.\n\nThe way to reproduce this issue:\n1. Use 1600x900 to display on host\n2. Mount ISO through 'Virtual media' on OpenBMC's web\n3. Run script as below on host to do sha continuously\n  #!/bin/bash\n  while [ [1] ];\n  do\n\tfind /media -type f -printf '\"%h/%f\"\\n' | xargs sha256sum\n  done\n4. Open KVM on OpenBMC's web\n\nThe size of macro block captured is 8x8. Therefore, we should make sure\nthe height of src-buf is 8 aligned to fix this issue.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52916"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c281355068bc258fd619c5aefd978595bede7bfe"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T09:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json b/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json
new file mode 100644
index 00000000000..f0072dfd081
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json
@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-84x7-6ff7-9cj2",
+  "modified": "2024-09-06T09:32:31Z",
+  "published": "2024-09-06T09:32:31Z",
+  "aliases": [
+    "CVE-2024-8317"
+  ],
+  "details": "The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad_alignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8317"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L2922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L3020"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L3127"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3146736"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3146736/#file6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/wpadcenter/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac7f95c7-2159-4327-ba09-da7721f1312e?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T07:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-mxhr-5h76-4875/GHSA-mxhr-5h76-4875.json b/advisories/unreviewed/2024/09/GHSA-mxhr-5h76-4875/GHSA-mxhr-5h76-4875.json
new file mode 100644
index 00000000000..700fdd545d9
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-mxhr-5h76-4875/GHSA-mxhr-5h76-4875.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mxhr-5h76-4875",
+  "modified": "2024-09-06T09:32:31Z",
+  "published": "2024-09-06T09:32:31Z",
+  "aliases": [
+    "CVE-2024-8427"
+  ],
+  "details": "The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and process_form_edit functions in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and forms.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8427"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.2/includes/classes/admin/class-fpsml-ajax-admin.php#L25"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3147218/frontend-post-submission-manager-lite/trunk/includes/classes/admin/class-fpsml-ajax-admin.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e84b68b6-1ce8-45fb-823f-a61158aa4d21?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T07:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r29w-mcfc-r8cc/GHSA-r29w-mcfc-r8cc.json b/advisories/unreviewed/2024/09/GHSA-r29w-mcfc-r8cc/GHSA-r29w-mcfc-r8cc.json
new file mode 100644
index 00000000000..0881709dd26
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-r29w-mcfc-r8cc/GHSA-r29w-mcfc-r8cc.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r29w-mcfc-r8cc",
+  "modified": "2024-09-06T09:32:30Z",
+  "published": "2024-09-06T09:32:30Z",
+  "aliases": [
+    "CVE-2024-8292"
+  ],
+  "details": "The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plugin not properly verifying a user's identity during new order creation. This makes it possible for unauthenticated attackers to supply any email through the user_email field and update the password for that user during new order creation. This requires the commerce addon to be enabled in order to exploit.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8292"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/add-on/commerce/classes/class-rcl-create-order.php#L127"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/add-on/commerce/functions-frontend.php#L113"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/rcl-functions.php#L1339"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3145798/wp-recall/trunk/add-on/commerce/classes/class-rcl-create-order.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8fa4b5df-dc71-49de-880b-895eb1d9cdca?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T07:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-rpfq-qgpp-7qm9/GHSA-rpfq-qgpp-7qm9.json b/advisories/unreviewed/2024/09/GHSA-rpfq-qgpp-7qm9/GHSA-rpfq-qgpp-7qm9.json
new file mode 100644
index 00000000000..d0e616e9002
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-rpfq-qgpp-7qm9/GHSA-rpfq-qgpp-7qm9.json
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rpfq-qgpp-7qm9",
+  "modified": "2024-09-06T09:32:31Z",
+  "published": "2024-09-06T09:32:31Z",
+  "aliases": [
+    "CVE-2023-52915"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n\nIn af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf\nis null and msg[i].len is zero, former checks on msg[i].buf would be\npassed. Malicious data finally reach af9035_i2c_master_xfer. If accessing\nmsg[i].buf[0] without sanity check, null ptr deref would happen.\nWe add check on msg[i].len to prevent crash.\n\nSimilar commit:\ncommit 0ed554fd769a\n(\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52915"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0143f282b15f7cedc0392ea10050fb6000fd16e6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/41b7181a40af84448a2b144fb02d8bf32b7e9a23"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/6c01ef65de0b321b2db1ef9abf8f1d15862b937e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7bf744f2de0a848fb1d717f5831b03db96feae89"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b2f54ed7739dfdf42c4df0a11131aad7c8635464"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b49c6e5dd236787f13a062ec528d724169f11152"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d9ef84a7c222497ecb5fdf93361c76931804825e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/fa58d9db5cad4bb7bb694b6837e3b96d87554f2b"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T09:15:02Z"
+  }
+}
\ No newline at end of file