From 2857b9fb2c9b7b314b4ce4d3f5c472c642835a97 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 10 Oct 2024 03:32:22 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-27vg-qjpq-w479.json | 46 ++++++++++++++++ .../GHSA-434g-2637-qmqr.json | 39 ++++++++++++++ .../GHSA-46x3-967f-mwfv.json | 42 +++++++++++++++ .../GHSA-472x-3g5g-c8wv.json | 50 +++++++++++++++++ .../GHSA-47ww-vfc5-5gxw.json | 42 +++++++++++++++ .../GHSA-5qr8-j5cm-m7fj.json | 46 ++++++++++++++++ .../GHSA-6h29-g2x6-h6hg.json | 54 +++++++++++++++++++ .../GHSA-75jv-g4w5-cpjq.json | 42 +++++++++++++++ .../GHSA-7p92-2q75-f35x.json | 46 ++++++++++++++++ .../GHSA-94rc-h54c-mc7x.json | 42 +++++++++++++++ .../GHSA-9mw4-2ppr-4mcg.json | 39 ++++++++++++++ .../GHSA-f378-qx8v-c7cf.json | 38 +++++++++++++ .../GHSA-gg62-f4j7-v9qc.json | 42 +++++++++++++++ .../GHSA-gvrq-2779-x2hw.json | 42 +++++++++++++++ .../GHSA-pjrc-h9ff-jhqw.json | 42 +++++++++++++++ .../GHSA-q3pf-cxmg-x888.json | 50 +++++++++++++++++ .../GHSA-q855-v2hj-cg56.json | 42 +++++++++++++++ .../GHSA-qc4q-h4wc-9xq4.json | 42 +++++++++++++++ .../GHSA-qh35-4qrq-2527.json | 42 +++++++++++++++ .../GHSA-rchp-hw9h-rrcc.json | 42 +++++++++++++++ .../GHSA-rmj4-vvpv-4m33.json | 39 ++++++++++++++ .../GHSA-rq6p-237r-mfmm.json | 42 +++++++++++++++ .../GHSA-v4pc-7q3f-7vf2.json | 42 +++++++++++++++ .../GHSA-v5w5-498x-xfrc.json | 42 +++++++++++++++ .../GHSA-w25r-358w-353h.json | 42 +++++++++++++++ 25 files changed, 1077 insertions(+) create mode 100644 advisories/unreviewed/2024/10/GHSA-27vg-qjpq-w479/GHSA-27vg-qjpq-w479.json create mode 100644 advisories/unreviewed/2024/10/GHSA-434g-2637-qmqr/GHSA-434g-2637-qmqr.json create mode 100644 advisories/unreviewed/2024/10/GHSA-46x3-967f-mwfv/GHSA-46x3-967f-mwfv.json create mode 100644 advisories/unreviewed/2024/10/GHSA-472x-3g5g-c8wv/GHSA-472x-3g5g-c8wv.json create mode 100644 advisories/unreviewed/2024/10/GHSA-47ww-vfc5-5gxw/GHSA-47ww-vfc5-5gxw.json create mode 100644 advisories/unreviewed/2024/10/GHSA-5qr8-j5cm-m7fj/GHSA-5qr8-j5cm-m7fj.json create mode 100644 advisories/unreviewed/2024/10/GHSA-6h29-g2x6-h6hg/GHSA-6h29-g2x6-h6hg.json create mode 100644 advisories/unreviewed/2024/10/GHSA-75jv-g4w5-cpjq/GHSA-75jv-g4w5-cpjq.json create mode 100644 advisories/unreviewed/2024/10/GHSA-7p92-2q75-f35x/GHSA-7p92-2q75-f35x.json create mode 100644 advisories/unreviewed/2024/10/GHSA-94rc-h54c-mc7x/GHSA-94rc-h54c-mc7x.json create mode 100644 advisories/unreviewed/2024/10/GHSA-9mw4-2ppr-4mcg/GHSA-9mw4-2ppr-4mcg.json create mode 100644 advisories/unreviewed/2024/10/GHSA-f378-qx8v-c7cf/GHSA-f378-qx8v-c7cf.json create mode 100644 advisories/unreviewed/2024/10/GHSA-gg62-f4j7-v9qc/GHSA-gg62-f4j7-v9qc.json create mode 100644 advisories/unreviewed/2024/10/GHSA-gvrq-2779-x2hw/GHSA-gvrq-2779-x2hw.json create mode 100644 advisories/unreviewed/2024/10/GHSA-pjrc-h9ff-jhqw/GHSA-pjrc-h9ff-jhqw.json create mode 100644 advisories/unreviewed/2024/10/GHSA-q3pf-cxmg-x888/GHSA-q3pf-cxmg-x888.json create mode 100644 advisories/unreviewed/2024/10/GHSA-q855-v2hj-cg56/GHSA-q855-v2hj-cg56.json create mode 100644 advisories/unreviewed/2024/10/GHSA-qc4q-h4wc-9xq4/GHSA-qc4q-h4wc-9xq4.json create mode 100644 advisories/unreviewed/2024/10/GHSA-qh35-4qrq-2527/GHSA-qh35-4qrq-2527.json create mode 100644 advisories/unreviewed/2024/10/GHSA-rchp-hw9h-rrcc/GHSA-rchp-hw9h-rrcc.json create mode 100644 advisories/unreviewed/2024/10/GHSA-rmj4-vvpv-4m33/GHSA-rmj4-vvpv-4m33.json create mode 100644 advisories/unreviewed/2024/10/GHSA-rq6p-237r-mfmm/GHSA-rq6p-237r-mfmm.json create mode 100644 advisories/unreviewed/2024/10/GHSA-v4pc-7q3f-7vf2/GHSA-v4pc-7q3f-7vf2.json create mode 100644 advisories/unreviewed/2024/10/GHSA-v5w5-498x-xfrc/GHSA-v5w5-498x-xfrc.json create mode 100644 advisories/unreviewed/2024/10/GHSA-w25r-358w-353h/GHSA-w25r-358w-353h.json diff --git a/advisories/unreviewed/2024/10/GHSA-27vg-qjpq-w479/GHSA-27vg-qjpq-w479.json b/advisories/unreviewed/2024/10/GHSA-27vg-qjpq-w479/GHSA-27vg-qjpq-w479.json new file mode 100644 index 00000000000..602fd4c1d29 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-27vg-qjpq-w479/GHSA-27vg-qjpq-w479.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-27vg-qjpq-w479", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:45Z", + "aliases": [ + "CVE-2024-8987" + ], + "details": "The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's youzify_media shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8987" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/youzify/tags/1.3.0/includes/public/core/functions/general/youzify-profile-functions.php#L910" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/youzify/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/19c463d1-41fa-4386-b755-a14d1e68c5bd?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-434g-2637-qmqr/GHSA-434g-2637-qmqr.json b/advisories/unreviewed/2024/10/GHSA-434g-2637-qmqr/GHSA-434g-2637-qmqr.json new file mode 100644 index 00000000000..65e42ec2b54 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-434g-2637-qmqr/GHSA-434g-2637-qmqr.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-434g-2637-qmqr", + "modified": "2024-10-10T03:30:44Z", + "published": "2024-10-10T03:30:44Z", + "aliases": [ + "CVE-2024-48949" + ], + "details": "The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits \"sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()\" validation.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48949" + }, + { + "type": "WEB", + "url": "https://github.com/indutny/elliptic/commit/7ac5360118f74eb02da73bdf9f24fd0c72ff5281" + }, + { + "type": "WEB", + "url": "https://github.com/indutny/elliptic/compare/v6.5.5...v6.5.6" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T01:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-46x3-967f-mwfv/GHSA-46x3-967f-mwfv.json b/advisories/unreviewed/2024/10/GHSA-46x3-967f-mwfv/GHSA-46x3-967f-mwfv.json new file mode 100644 index 00000000000..4299e6fe8cf --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-46x3-967f-mwfv/GHSA-46x3-967f-mwfv.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-46x3-967f-mwfv", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9065" + ], + "details": "The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1. This makes it possible for unauthenticated attackers to send emails containing any content and originating from the vulnerable WordPress instance to any recipient.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9065" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-helper-lite/trunk/functions/class.wps-frontend-setup-function.php#L55" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5f3c6d98-6f30-4a98-91c9-e77c1f960527?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-472x-3g5g-c8wv/GHSA-472x-3g5g-c8wv.json b/advisories/unreviewed/2024/10/GHSA-472x-3g5g-c8wv/GHSA-472x-3g5g-c8wv.json new file mode 100644 index 00000000000..7c52ccb43b6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-472x-3g5g-c8wv/GHSA-472x-3g5g-c8wv.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-472x-3g5g-c8wv", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9520" + ], + "details": "The UserPlus plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.0. This makes it possible for authenticated attackers with subscriber-level permissions or above, to add, modify, or delete user meta and plugin options.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9520" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/userplus/trunk/admin/admin-ajax.php?rev=1627771#L186" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/userplus/trunk/admin/admin-ajax.php?rev=1627771#L216" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/userplus/trunk/admin/admin-ajax.php?rev=1627771#L225" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e64e41a1-ea8e-41b4-911c-672caf0d2df1?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T03:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-47ww-vfc5-5gxw/GHSA-47ww-vfc5-5gxw.json b/advisories/unreviewed/2024/10/GHSA-47ww-vfc5-5gxw/GHSA-47ww-vfc5-5gxw.json new file mode 100644 index 00000000000..f183e91f584 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-47ww-vfc5-5gxw/GHSA-47ww-vfc5-5gxw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-47ww-vfc5-5gxw", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9057" + ], + "details": "The Curator.io: Show all your social media posts in a beautiful feed. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘feed_id’ attribute in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9057" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/curatorio/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/953d64f2-a514-48e9-9ab3-f9a793ad953a?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-5qr8-j5cm-m7fj/GHSA-5qr8-j5cm-m7fj.json b/advisories/unreviewed/2024/10/GHSA-5qr8-j5cm-m7fj/GHSA-5qr8-j5cm-m7fj.json new file mode 100644 index 00000000000..a04fd3b2d09 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-5qr8-j5cm-m7fj/GHSA-5qr8-j5cm-m7fj.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5qr8-j5cm-m7fj", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9685" + ], + "details": "The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftb_test_action' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to send a test message via the Telegram Bot API to all users configured in the settings.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9685" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/notification-for-telegram/tags/3.3/index.php#L202" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3165615/notification-for-telegram" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/abaebd3b-69ab-4e9b-a528-c9d846e62238?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-6h29-g2x6-h6hg/GHSA-6h29-g2x6-h6hg.json b/advisories/unreviewed/2024/10/GHSA-6h29-g2x6-h6hg/GHSA-6h29-g2x6-h6hg.json new file mode 100644 index 00000000000..94de6d0935b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-6h29-g2x6-h6hg/GHSA-6h29-g2x6-h6hg.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6h29-g2x6-h6hg", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9022" + ], + "details": "The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9022" + }, + { + "type": "WEB", + "url": "https://github.com/capture0x/Poll-Plugin-SQL-Injection-" + }, + { + "type": "WEB", + "url": "https://packetstormsecurity.com/files/179414/WordPress-Poll-2.3.6-SQL-Injection.html" + }, + { + "type": "WEB", + "url": "https://total-soft.com/wp-poll" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/poll-wp/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d16363d6-ca4b-4de0-abae-a7b07803e2e3?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T03:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-75jv-g4w5-cpjq/GHSA-75jv-g4w5-cpjq.json b/advisories/unreviewed/2024/10/GHSA-75jv-g4w5-cpjq/GHSA-75jv-g4w5-cpjq.json new file mode 100644 index 00000000000..b90aa7ca89c --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-75jv-g4w5-cpjq/GHSA-75jv-g4w5-cpjq.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-75jv-g4w5-cpjq", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9518" + ], + "details": "The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9518" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/userplus/trunk/functions/user-functions.php?rev=1604604#L47" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2489e649-27f7-4ca0-8655-0957016fa89a?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-7p92-2q75-f35x/GHSA-7p92-2q75-f35x.json b/advisories/unreviewed/2024/10/GHSA-7p92-2q75-f35x/GHSA-7p92-2q75-f35x.json new file mode 100644 index 00000000000..454401fbabe --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-7p92-2q75-f35x/GHSA-7p92-2q75-f35x.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7p92-2q75-f35x", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9205" + ], + "details": "The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9205" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/maximum-products-per-user-for-woocommerce/tags/4.2.8/includes/class-alg-wc-mppu-users.php#L836" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3164534/maximum-products-per-user-for-woocommerce/tags/4.2.9/includes/class-alg-wc-mppu-users.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/140c0d22-dc26-4100-a5c0-a2f8a6f98d97?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-94rc-h54c-mc7x/GHSA-94rc-h54c-mc7x.json b/advisories/unreviewed/2024/10/GHSA-94rc-h54c-mc7x/GHSA-94rc-h54c-mc7x.json new file mode 100644 index 00000000000..a503538cd9a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-94rc-h54c-mc7x/GHSA-94rc-h54c-mc7x.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-94rc-h54c-mc7x", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9067" + ], + "details": "The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'delete_attachment' function in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary attachments.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9067" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/youzify/trunk/includes/public/core/class-youzify-attachments.php#L1183" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e099d8e2-6305-43fc-8807-a37791deb2ff?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T03:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-9mw4-2ppr-4mcg/GHSA-9mw4-2ppr-4mcg.json b/advisories/unreviewed/2024/10/GHSA-9mw4-2ppr-4mcg/GHSA-9mw4-2ppr-4mcg.json new file mode 100644 index 00000000000..f17f19c9f9d --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-9mw4-2ppr-4mcg/GHSA-9mw4-2ppr-4mcg.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9mw4-2ppr-4mcg", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:45Z", + "aliases": [ + "CVE-2024-48958" + ], + "details": "execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48958" + }, + { + "type": "WEB", + "url": "https://github.com/libarchive/libarchive/pull/2148" + }, + { + "type": "WEB", + "url": "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-f378-qx8v-c7cf/GHSA-f378-qx8v-c7cf.json b/advisories/unreviewed/2024/10/GHSA-f378-qx8v-c7cf/GHSA-f378-qx8v-c7cf.json new file mode 100644 index 00000000000..057961f060b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-f378-qx8v-c7cf/GHSA-f378-qx8v-c7cf.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f378-qx8v-c7cf", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:45Z", + "aliases": [ + "CVE-2024-7048" + ], + "details": "In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this vulnerability, an attacker can view metadata of files uploaded by an admin and overwrite these files, compromising the integrity and availability of the RAG models.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7048" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/acd0b2dd-61eb-4712-82d3-a4e35d6ee560" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-gg62-f4j7-v9qc/GHSA-gg62-f4j7-v9qc.json b/advisories/unreviewed/2024/10/GHSA-gg62-f4j7-v9qc/GHSA-gg62-f4j7-v9qc.json new file mode 100644 index 00000000000..96259e3b89e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-gg62-f4j7-v9qc/GHSA-gg62-f4j7-v9qc.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gg62-f4j7-v9qc", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9064" + ], + "details": "The Elementor Inline SVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9064" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/inline-svg-elementor/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5aab3dea-5d14-4316-9a4c-97b0d30762bf?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-gvrq-2779-x2hw/GHSA-gvrq-2779-x2hw.json b/advisories/unreviewed/2024/10/GHSA-gvrq-2779-x2hw/GHSA-gvrq-2779-x2hw.json new file mode 100644 index 00000000000..19fd49efdd4 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-gvrq-2779-x2hw/GHSA-gvrq-2779-x2hw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gvrq-2779-x2hw", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9519" + ], + "details": "The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'save_metabox_form' function in versions up to, and including, 2.0. This makes it possible for authenticated attackers, with editor-level permissions or above, to update the registration form role to administrator, which leads to privilege escalation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9519" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/userplus/trunk/admin/admin-post-metaboxes.php?rev=1627771#L62" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1148b18d-7af1-41c6-bd7f-1b2d53cb44e6?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-266" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-pjrc-h9ff-jhqw/GHSA-pjrc-h9ff-jhqw.json b/advisories/unreviewed/2024/10/GHSA-pjrc-h9ff-jhqw/GHSA-pjrc-h9ff-jhqw.json new file mode 100644 index 00000000000..ec72b2a7614 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-pjrc-h9ff-jhqw/GHSA-pjrc-h9ff-jhqw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pjrc-h9ff-jhqw", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:45Z", + "aliases": [ + "CVE-2024-8729" + ], + "details": "The Easy Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8729" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/easy-social-share-buttons/trunk/includes/class-easy-social-share-buttons-settings.php#L271" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b616bb6c-0861-4920-a589-f2c5bb819164?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q3pf-cxmg-x888/GHSA-q3pf-cxmg-x888.json b/advisories/unreviewed/2024/10/GHSA-q3pf-cxmg-x888/GHSA-q3pf-cxmg-x888.json new file mode 100644 index 00000000000..ea7116d99de --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-q3pf-cxmg-x888/GHSA-q3pf-cxmg-x888.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q3pf-cxmg-x888", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9377" + ], + "details": "The Products, Order & Customers Export for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.0.15. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9377" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/export-woocommerce/tags/2.0.15/includes/class-alg-wc-export-core.php#L216" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/export-woocommerce/tags/2.0.15/includes/class-alg-wc-export-core.php#L220" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3164996" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/67d2e1c7-dbd3-4195-8bdb-3b85b25bfa52?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q855-v2hj-cg56/GHSA-q855-v2hj-cg56.json b/advisories/unreviewed/2024/10/GHSA-q855-v2hj-cg56/GHSA-q855-v2hj-cg56.json new file mode 100644 index 00000000000..35392afc9b7 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-q855-v2hj-cg56/GHSA-q855-v2hj-cg56.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q855-v2hj-cg56", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9066" + ], + "details": "The Marketing and SEO Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9066" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/marketing-and-seo-booster/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/52144ff6-0617-496c-8159-ec5d7bc86f60?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qc4q-h4wc-9xq4/GHSA-qc4q-h4wc-9xq4.json b/advisories/unreviewed/2024/10/GHSA-qc4q-h4wc-9xq4/GHSA-qc4q-h4wc-9xq4.json new file mode 100644 index 00000000000..bec7981fddc --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-qc4q-h4wc-9xq4/GHSA-qc4q-h4wc-9xq4.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qc4q-h4wc-9xq4", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-8477" + ], + "details": "The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.87. This is due to missing or incorrect nonce validation on the Init() function. This makes it possible for unauthenticated attackers to log out of a Brevo connection via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8477" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3165451/mailin/tags/3.1.88/page/page-home.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e070b422-9036-4362-832b-43fd4838f394?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T03:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qh35-4qrq-2527/GHSA-qh35-4qrq-2527.json b/advisories/unreviewed/2024/10/GHSA-qh35-4qrq-2527/GHSA-qh35-4qrq-2527.json new file mode 100644 index 00000000000..5ce3d6b15a9 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-qh35-4qrq-2527/GHSA-qh35-4qrq-2527.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qh35-4qrq-2527", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9522" + ], + "details": "The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9522" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-users-masquerade/trunk/masquerade.php?rev=1703860#L162" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4a4f0909-76f6-4d27-87b1-f6cd5f5cbbb7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-288" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-rchp-hw9h-rrcc/GHSA-rchp-hw9h-rrcc.json b/advisories/unreviewed/2024/10/GHSA-rchp-hw9h-rrcc/GHSA-rchp-hw9h-rrcc.json new file mode 100644 index 00000000000..99860d3830e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-rchp-hw9h-rrcc/GHSA-rchp-hw9h-rrcc.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rchp-hw9h-rrcc", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9074" + ], + "details": "The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9074" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/advanced-blocks-pro/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f419d14a-90d1-445a-b629-c2e978c3ab81?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T03:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-rmj4-vvpv-4m33/GHSA-rmj4-vvpv-4m33.json b/advisories/unreviewed/2024/10/GHSA-rmj4-vvpv-4m33/GHSA-rmj4-vvpv-4m33.json new file mode 100644 index 00000000000..274bc7f3ed6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-rmj4-vvpv-4m33/GHSA-rmj4-vvpv-4m33.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rmj4-vvpv-4m33", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:44Z", + "aliases": [ + "CVE-2024-48957" + ], + "details": "execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48957" + }, + { + "type": "WEB", + "url": "https://github.com/libarchive/libarchive/pull/2149" + }, + { + "type": "WEB", + "url": "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-rq6p-237r-mfmm/GHSA-rq6p-237r-mfmm.json b/advisories/unreviewed/2024/10/GHSA-rq6p-237r-mfmm/GHSA-rq6p-237r-mfmm.json new file mode 100644 index 00000000000..808edff9751 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-rq6p-237r-mfmm/GHSA-rq6p-237r-mfmm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rq6p-237r-mfmm", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9457" + ], + "details": "The WP Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9457" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/cssjockey-add-ons/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/041c21fb-f2f0-45cb-b3ae-20f3ae22c947?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-v4pc-7q3f-7vf2/GHSA-v4pc-7q3f-7vf2.json b/advisories/unreviewed/2024/10/GHSA-v4pc-7q3f-7vf2/GHSA-v4pc-7q3f-7vf2.json new file mode 100644 index 00000000000..3cd1082c442 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-v4pc-7q3f-7vf2/GHSA-v4pc-7q3f-7vf2.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v4pc-7q3f-7vf2", + "modified": "2024-10-10T03:30:45Z", + "published": "2024-10-10T03:30:45Z", + "aliases": [ + "CVE-2024-8513" + ], + "details": "The QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_save_plugin_config() function in all versions up to, and including, 4.1.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8513" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/qa-heatmap-analytics/trunk/class-qahm-admin-page-config.php#L801" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/15d29d58-9e28-4e18-aeb9-9c63cb308673?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-v5w5-498x-xfrc/GHSA-v5w5-498x-xfrc.json b/advisories/unreviewed/2024/10/GHSA-v5w5-498x-xfrc/GHSA-v5w5-498x-xfrc.json new file mode 100644 index 00000000000..31a4531c59b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-v5w5-498x-xfrc/GHSA-v5w5-498x-xfrc.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v5w5-498x-xfrc", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9581" + ], + "details": "The Shortcodes AnyWhere plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9581" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/shortcodes-anywhere/trunk/core/shortcodeEverywhere.class.php#L15" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7e289b06-66c8-4d50-a8f7-e07c5ae8f7c8?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-w25r-358w-353h/GHSA-w25r-358w-353h.json b/advisories/unreviewed/2024/10/GHSA-w25r-358w-353h/GHSA-w25r-358w-353h.json new file mode 100644 index 00000000000..ed52eb0ac7f --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w25r-358w-353h/GHSA-w25r-358w-353h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w25r-358w-353h", + "modified": "2024-10-10T03:30:46Z", + "published": "2024-10-10T03:30:46Z", + "aliases": [ + "CVE-2024-9072" + ], + "details": "The GDPR-Extensions-com – Consent Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9072" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/gdpr-consent-manager/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0ce2a9fe-3364-46b5-a6ae-b4feb3e20647?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-10T02:15:04Z" + } +} \ No newline at end of file