diff --git a/advisories/unreviewed/2024/09/GHSA-2x3r-qhc4-2pjr/GHSA-2x3r-qhc4-2pjr.json b/advisories/unreviewed/2024/09/GHSA-2x3r-qhc4-2pjr/GHSA-2x3r-qhc4-2pjr.json
new file mode 100644
index 00000000000..53d528c612b
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-2x3r-qhc4-2pjr/GHSA-2x3r-qhc4-2pjr.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2x3r-qhc4-2pjr",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7859"
+  ],
+  "details": "The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7859"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/88cacd47-d900-478c-b833-c6c55fd4b082"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-52vm-8f6x-7r3p/GHSA-52vm-8f6x-7r3p.json b/advisories/unreviewed/2024/09/GHSA-52vm-8f6x-7r3p/GHSA-52vm-8f6x-7r3p.json
new file mode 100644
index 00000000000..b744959f5a2
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-52vm-8f6x-7r3p/GHSA-52vm-8f6x-7r3p.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-52vm-8f6x-7r3p",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-8054"
+  ],
+  "details": "The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8054"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/f27deffc-9555-44bf-8dee-1891c210ecfd"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-6pj4-296c-2375/GHSA-6pj4-296c-2375.json b/advisories/unreviewed/2024/09/GHSA-6pj4-296c-2375/GHSA-6pj4-296c-2375.json
new file mode 100644
index 00000000000..ac5d6094e8a
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-6pj4-296c-2375/GHSA-6pj4-296c-2375.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6pj4-296c-2375",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7766"
+  ],
+  "details": "The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7766"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/ca4d629e-ab55-4e5d-80c9-fddbc9c97259"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-6x3x-mhgp-4j2c/GHSA-6x3x-mhgp-4j2c.json b/advisories/unreviewed/2024/09/GHSA-6x3x-mhgp-4j2c/GHSA-6x3x-mhgp-4j2c.json
new file mode 100644
index 00000000000..8acbf514867
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-6x3x-mhgp-4j2c/GHSA-6x3x-mhgp-4j2c.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6x3x-mhgp-4j2c",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-6019"
+  ],
+  "details": "The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6019"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/5899c5c9-a550-4c86-a41d-7fcc1e84a7d3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-g7qh-m9g7-242j/GHSA-g7qh-m9g7-242j.json b/advisories/unreviewed/2024/09/GHSA-g7qh-m9g7-242j/GHSA-g7qh-m9g7-242j.json
new file mode 100644
index 00000000000..ab4cbf7fec3
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-g7qh-m9g7-242j/GHSA-g7qh-m9g7-242j.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g7qh-m9g7-242j",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-8711"
+  ],
+  "details": "A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8711"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jz-qb/cve/blob/main/dir.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.277220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.277220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.405343"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.sourcecodester.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-548"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T04:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-gr7c-mhmf-p6jj/GHSA-gr7c-mhmf-p6jj.json b/advisories/unreviewed/2024/09/GHSA-gr7c-mhmf-p6jj/GHSA-gr7c-mhmf-p6jj.json
new file mode 100644
index 00000000000..8f419989b05
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-gr7c-mhmf-p6jj/GHSA-gr7c-mhmf-p6jj.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gr7c-mhmf-p6jj",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7861"
+  ],
+  "details": "The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7861"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/df9aa795-ba16-4806-b01a-311f80aa52c0"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-j75g-rhx3-9jfv/GHSA-j75g-rhx3-9jfv.json b/advisories/unreviewed/2024/09/GHSA-j75g-rhx3-9jfv/GHSA-j75g-rhx3-9jfv.json
new file mode 100644
index 00000000000..01e2a02ab7b
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-j75g-rhx3-9jfv/GHSA-j75g-rhx3-9jfv.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j75g-rhx3-9jfv",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7817"
+  ],
+  "details": "The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7817"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/ab09e5a3-f5ea-479f-be2d-366f8707775e"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jj2m-7f8j-222w/GHSA-jj2m-7f8j-222w.json b/advisories/unreviewed/2024/09/GHSA-jj2m-7f8j-222w/GHSA-jj2m-7f8j-222w.json
new file mode 100644
index 00000000000..54b6c5a3d52
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-jj2m-7f8j-222w/GHSA-jj2m-7f8j-222w.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jj2m-7f8j-222w",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7822"
+  ],
+  "details": "The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7822"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/3a5bdd7e-7dd5-4749-9fad-ff4d7df20273"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-jq4w-q2w4-8qw3/GHSA-jq4w-q2w4-8qw3.json b/advisories/unreviewed/2024/09/GHSA-jq4w-q2w4-8qw3/GHSA-jq4w-q2w4-8qw3.json
new file mode 100644
index 00000000000..c27fe82c4ce
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-jq4w-q2w4-8qw3/GHSA-jq4w-q2w4-8qw3.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jq4w-q2w4-8qw3",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7818"
+  ],
+  "details": "The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7818"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/3d2263b9-e1e7-4e86-8475-5e468eef1826"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-m2wr-9pq6-49jc/GHSA-m2wr-9pq6-49jc.json b/advisories/unreviewed/2024/09/GHSA-m2wr-9pq6-49jc/GHSA-m2wr-9pq6-49jc.json
new file mode 100644
index 00000000000..effb8aa60a3
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-m2wr-9pq6-49jc/GHSA-m2wr-9pq6-49jc.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m2wr-9pq6-49jc",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-6017"
+  ],
+  "details": "The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6017"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/06d0559e-4389-4280-bbef-d100c0e07903"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-q95f-jm6p-77wg/GHSA-q95f-jm6p-77wg.json b/advisories/unreviewed/2024/09/GHSA-q95f-jm6p-77wg/GHSA-q95f-jm6p-77wg.json
new file mode 100644
index 00000000000..c29cec0afee
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-q95f-jm6p-77wg/GHSA-q95f-jm6p-77wg.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q95f-jm6p-77wg",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7860"
+  ],
+  "details": "The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7860"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/584156d7-928e-48c9-8b81-539ccb06f3f5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-qmm9-m4wr-gv24/GHSA-qmm9-m4wr-gv24.json b/advisories/unreviewed/2024/09/GHSA-qmm9-m4wr-gv24/GHSA-qmm9-m4wr-gv24.json
new file mode 100644
index 00000000000..60dfd2ed4fc
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-qmm9-m4wr-gv24/GHSA-qmm9-m4wr-gv24.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qmm9-m4wr-gv24",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-6887"
+  ],
+  "details": "The Giveaways and Contests by RafflePress  WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high privilege users such as editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6887"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/553806f4-da20-433c-8c19-35e6c87ccade"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-qv98-75v6-5rhf/GHSA-qv98-75v6-5rhf.json b/advisories/unreviewed/2024/09/GHSA-qv98-75v6-5rhf/GHSA-qv98-75v6-5rhf.json
new file mode 100644
index 00000000000..0d5bb2b1f93
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-qv98-75v6-5rhf/GHSA-qv98-75v6-5rhf.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qv98-75v6-5rhf",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-8056"
+  ],
+  "details": "The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8056"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/203b8122-f1e5-4e9e-ba83-f5cd59d8a289"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r4gm-mp4j-4fq7/GHSA-r4gm-mp4j-4fq7.json b/advisories/unreviewed/2024/09/GHSA-r4gm-mp4j-4fq7/GHSA-r4gm-mp4j-4fq7.json
new file mode 100644
index 00000000000..fafe4328a6a
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-r4gm-mp4j-4fq7/GHSA-r4gm-mp4j-4fq7.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r4gm-mp4j-4fq7",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7820"
+  ],
+  "details": "The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7820"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/31b2c97b-2458-43ee-93db-e57968ac8455"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r53m-j46m-cw28/GHSA-r53m-j46m-cw28.json b/advisories/unreviewed/2024/09/GHSA-r53m-j46m-cw28/GHSA-r53m-j46m-cw28.json
new file mode 100644
index 00000000000..670015fcabf
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-r53m-j46m-cw28/GHSA-r53m-j46m-cw28.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r53m-j46m-cw28",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7862"
+  ],
+  "details": "The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7862"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/9b54cd05-3bb8-4bb9-a0e4-fb00d97d5cae"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-rccv-3qjv-c8h5/GHSA-rccv-3qjv-c8h5.json b/advisories/unreviewed/2024/09/GHSA-rccv-3qjv-c8h5/GHSA-rccv-3qjv-c8h5.json
new file mode 100644
index 00000000000..0a7effd45d4
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-rccv-3qjv-c8h5/GHSA-rccv-3qjv-c8h5.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rccv-3qjv-c8h5",
+  "modified": "2024-09-12T06:30:22Z",
+  "published": "2024-09-12T06:30:22Z",
+  "aliases": [
+    "CVE-2024-7816"
+  ],
+  "details": "The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7816"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/f610c4a5-ccde-4305-93e0-3c6f50c741ee"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-rp3x-cq62-cvh4/GHSA-rp3x-cq62-cvh4.json b/advisories/unreviewed/2024/09/GHSA-rp3x-cq62-cvh4/GHSA-rp3x-cq62-cvh4.json
new file mode 100644
index 00000000000..424718ae958
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-rp3x-cq62-cvh4/GHSA-rp3x-cq62-cvh4.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rp3x-cq62-cvh4",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-6018"
+  ],
+  "details": "The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6018"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/c3f50e30-c7c5-4e7e-988c-ab884d75870b"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-vrm8-8c2f-82r7/GHSA-vrm8-8c2f-82r7.json b/advisories/unreviewed/2024/09/GHSA-vrm8-8c2f-82r7/GHSA-vrm8-8c2f-82r7.json
new file mode 100644
index 00000000000..33422d36bec
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-vrm8-8c2f-82r7/GHSA-vrm8-8c2f-82r7.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vrm8-8c2f-82r7",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-3163"
+  ],
+  "details": "The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3163"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/f89c8654-5486-4939-880d-101f33d359c0"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-wpxq-m249-cq6r/GHSA-wpxq-m249-cq6r.json b/advisories/unreviewed/2024/09/GHSA-wpxq-m249-cq6r/GHSA-wpxq-m249-cq6r.json
new file mode 100644
index 00000000000..034159bdff5
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-wpxq-m249-cq6r/GHSA-wpxq-m249-cq6r.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wpxq-m249-cq6r",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-5799"
+  ],
+  "details": "The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/3ee3023a-541c-40e6-8d62-24b4b110633c"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T06:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-x87c-6pgx-5c37/GHSA-x87c-6pgx-5c37.json b/advisories/unreviewed/2024/09/GHSA-x87c-6pgx-5c37/GHSA-x87c-6pgx-5c37.json
new file mode 100644
index 00000000000..f3a3b5434cd
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-x87c-6pgx-5c37/GHSA-x87c-6pgx-5c37.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x87c-6pgx-5c37",
+  "modified": "2024-09-12T06:30:21Z",
+  "published": "2024-09-12T06:30:21Z",
+  "aliases": [
+    "CVE-2024-45624"
+  ],
+  "details": "Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45624"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN67456481"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.pgpool.net/mediawiki/index.php/Main_Page#News"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-12T05:15:05Z"
+  }
+}
\ No newline at end of file