From 4b5e334ea531ce54f1a63524023c5f9797540e53 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 1 Oct 2024 09:32:12 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-hqgv-wx4f-4hmj.json | 2 +- .../GHSA-25p4-xq52-q9pw.json | 42 +++++++++ .../GHSA-25x7-jcpc-96r4.json | 46 ++++++++++ .../GHSA-2cjx-jpg9-5gqm.json | 86 +++++++++++++++++++ .../GHSA-324g-rp4q-gr7p.json | 46 ++++++++++ .../GHSA-3pp3-27wh-qpp3.json | 50 +++++++++++ .../GHSA-3xpv-gvv8-7m5h.json | 42 +++++++++ .../GHSA-4858-5pjv-4mwh.json | 42 +++++++++ .../GHSA-4gvj-wfph-8c6j.json | 42 +++++++++ .../GHSA-4hhh-j69q-9jfh.json | 54 ++++++++++++ .../GHSA-4qx9-m4vj-hq7h.json | 42 +++++++++ .../GHSA-572v-c6hj-jf7h.json | 42 +++++++++ .../GHSA-5grv-4qg8-xxfq.json | 46 ++++++++++ .../GHSA-5jj7-8xg3-fgc8.json | 42 +++++++++ .../GHSA-5pwq-wp5g-57fv.json | 42 +++++++++ .../GHSA-6q69-wjrh-97pm.json | 42 +++++++++ .../GHSA-7wcp-q9jj-q496.json | 42 +++++++++ .../GHSA-88rw-gmxx-j2pc.json | 42 +++++++++ .../GHSA-8xgh-92p8-484p.json | 42 +++++++++ .../GHSA-96c4-3cv2-j54p.json | 46 ++++++++++ .../GHSA-c3q3-8w92-6623.json | 42 +++++++++ .../GHSA-c7wh-633w-r3r6.json | 42 +++++++++ .../GHSA-c9j6-rm6x-5mq3.json | 42 +++++++++ .../GHSA-f3qm-hjm2-w89q.json | 42 +++++++++ .../GHSA-f6w4-8mf4-6h43.json | 42 +++++++++ .../GHSA-fcff-4m68-vv98.json | 42 +++++++++ .../GHSA-gp5m-f36h-4mw3.json | 42 +++++++++ .../GHSA-jm63-gfmj-678f.json | 42 +++++++++ .../GHSA-mr5r-968f-9m2f.json | 46 ++++++++++ .../GHSA-p726-x3jw-jj27.json | 42 +++++++++ .../GHSA-pxxv-92q8-v4m7.json | 46 ++++++++++ .../GHSA-r9g6-wcjx-jmg8.json | 42 +++++++++ .../GHSA-v3qj-hv3w-mwh8.json | 46 ++++++++++ .../GHSA-v493-jrcx-3c4x.json | 42 +++++++++ .../GHSA-v9xw-x7f7-qppq.json | 42 +++++++++ .../GHSA-w4g5-wwhq-79mp.json | 42 +++++++++ .../GHSA-w5mm-q3mg-9fmf.json | 54 ++++++++++++ .../GHSA-w8x6-88rf-9hhp.json | 46 ++++++++++ 38 files changed, 1663 insertions(+), 1 deletion(-) create mode 100644 advisories/unreviewed/2024/10/GHSA-25p4-xq52-q9pw/GHSA-25p4-xq52-q9pw.json create mode 100644 advisories/unreviewed/2024/10/GHSA-25x7-jcpc-96r4/GHSA-25x7-jcpc-96r4.json create mode 100644 advisories/unreviewed/2024/10/GHSA-2cjx-jpg9-5gqm/GHSA-2cjx-jpg9-5gqm.json create mode 100644 advisories/unreviewed/2024/10/GHSA-324g-rp4q-gr7p/GHSA-324g-rp4q-gr7p.json create mode 100644 advisories/unreviewed/2024/10/GHSA-3pp3-27wh-qpp3/GHSA-3pp3-27wh-qpp3.json create mode 100644 advisories/unreviewed/2024/10/GHSA-3xpv-gvv8-7m5h/GHSA-3xpv-gvv8-7m5h.json create mode 100644 advisories/unreviewed/2024/10/GHSA-4858-5pjv-4mwh/GHSA-4858-5pjv-4mwh.json create mode 100644 advisories/unreviewed/2024/10/GHSA-4gvj-wfph-8c6j/GHSA-4gvj-wfph-8c6j.json create mode 100644 advisories/unreviewed/2024/10/GHSA-4hhh-j69q-9jfh/GHSA-4hhh-j69q-9jfh.json create mode 100644 advisories/unreviewed/2024/10/GHSA-4qx9-m4vj-hq7h/GHSA-4qx9-m4vj-hq7h.json create mode 100644 advisories/unreviewed/2024/10/GHSA-572v-c6hj-jf7h/GHSA-572v-c6hj-jf7h.json create mode 100644 advisories/unreviewed/2024/10/GHSA-5grv-4qg8-xxfq/GHSA-5grv-4qg8-xxfq.json create mode 100644 advisories/unreviewed/2024/10/GHSA-5jj7-8xg3-fgc8/GHSA-5jj7-8xg3-fgc8.json create mode 100644 advisories/unreviewed/2024/10/GHSA-5pwq-wp5g-57fv/GHSA-5pwq-wp5g-57fv.json create mode 100644 advisories/unreviewed/2024/10/GHSA-6q69-wjrh-97pm/GHSA-6q69-wjrh-97pm.json create mode 100644 advisories/unreviewed/2024/10/GHSA-7wcp-q9jj-q496/GHSA-7wcp-q9jj-q496.json create mode 100644 advisories/unreviewed/2024/10/GHSA-88rw-gmxx-j2pc/GHSA-88rw-gmxx-j2pc.json create mode 100644 advisories/unreviewed/2024/10/GHSA-8xgh-92p8-484p/GHSA-8xgh-92p8-484p.json create mode 100644 advisories/unreviewed/2024/10/GHSA-96c4-3cv2-j54p/GHSA-96c4-3cv2-j54p.json create mode 100644 advisories/unreviewed/2024/10/GHSA-c3q3-8w92-6623/GHSA-c3q3-8w92-6623.json create mode 100644 advisories/unreviewed/2024/10/GHSA-c7wh-633w-r3r6/GHSA-c7wh-633w-r3r6.json create mode 100644 advisories/unreviewed/2024/10/GHSA-c9j6-rm6x-5mq3/GHSA-c9j6-rm6x-5mq3.json create mode 100644 advisories/unreviewed/2024/10/GHSA-f3qm-hjm2-w89q/GHSA-f3qm-hjm2-w89q.json create mode 100644 advisories/unreviewed/2024/10/GHSA-f6w4-8mf4-6h43/GHSA-f6w4-8mf4-6h43.json create mode 100644 advisories/unreviewed/2024/10/GHSA-fcff-4m68-vv98/GHSA-fcff-4m68-vv98.json create mode 100644 advisories/unreviewed/2024/10/GHSA-gp5m-f36h-4mw3/GHSA-gp5m-f36h-4mw3.json create mode 100644 advisories/unreviewed/2024/10/GHSA-jm63-gfmj-678f/GHSA-jm63-gfmj-678f.json create mode 100644 advisories/unreviewed/2024/10/GHSA-mr5r-968f-9m2f/GHSA-mr5r-968f-9m2f.json create mode 100644 advisories/unreviewed/2024/10/GHSA-p726-x3jw-jj27/GHSA-p726-x3jw-jj27.json create mode 100644 advisories/unreviewed/2024/10/GHSA-pxxv-92q8-v4m7/GHSA-pxxv-92q8-v4m7.json create mode 100644 advisories/unreviewed/2024/10/GHSA-r9g6-wcjx-jmg8/GHSA-r9g6-wcjx-jmg8.json create mode 100644 advisories/unreviewed/2024/10/GHSA-v3qj-hv3w-mwh8/GHSA-v3qj-hv3w-mwh8.json create mode 100644 advisories/unreviewed/2024/10/GHSA-v493-jrcx-3c4x/GHSA-v493-jrcx-3c4x.json create mode 100644 advisories/unreviewed/2024/10/GHSA-v9xw-x7f7-qppq/GHSA-v9xw-x7f7-qppq.json create mode 100644 advisories/unreviewed/2024/10/GHSA-w4g5-wwhq-79mp/GHSA-w4g5-wwhq-79mp.json create mode 100644 advisories/unreviewed/2024/10/GHSA-w5mm-q3mg-9fmf/GHSA-w5mm-q3mg-9fmf.json create mode 100644 advisories/unreviewed/2024/10/GHSA-w8x6-88rf-9hhp/GHSA-w8x6-88rf-9hhp.json diff --git a/advisories/unreviewed/2023/12/GHSA-hqgv-wx4f-4hmj/GHSA-hqgv-wx4f-4hmj.json b/advisories/unreviewed/2023/12/GHSA-hqgv-wx4f-4hmj/GHSA-hqgv-wx4f-4hmj.json index 951b84ef27d..934c1630a97 100644 --- a/advisories/unreviewed/2023/12/GHSA-hqgv-wx4f-4hmj/GHSA-hqgv-wx4f-4hmj.json +++ b/advisories/unreviewed/2023/12/GHSA-hqgv-wx4f-4hmj/GHSA-hqgv-wx4f-4hmj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hqgv-wx4f-4hmj", - "modified": "2023-12-14T15:30:22Z", + "modified": "2024-10-01T09:30:47Z", "published": "2023-12-14T15:30:22Z", "aliases": [ "CVE-2023-46144" diff --git a/advisories/unreviewed/2024/10/GHSA-25p4-xq52-q9pw/GHSA-25p4-xq52-q9pw.json b/advisories/unreviewed/2024/10/GHSA-25p4-xq52-q9pw/GHSA-25p4-xq52-q9pw.json new file mode 100644 index 00000000000..c4149d1d723 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-25p4-xq52-q9pw/GHSA-25p4-xq52-q9pw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-25p4-xq52-q9pw", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9106" + ], + "details": "The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This is only exploitable if the app secret is not set, so it has a default empty value.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9106" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wechat-social-login/trunk/add-ons/social-qq/class-xh-social-channel-qq.php?rev=2080785#L284" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd44471-1a9c-4465-a52a-be64d51e7ea1?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-288" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-25x7-jcpc-96r4/GHSA-25x7-jcpc-96r4.json b/advisories/unreviewed/2024/10/GHSA-25x7-jcpc-96r4/GHSA-25x7-jcpc-96r4.json new file mode 100644 index 00000000000..5be0436fb7c --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-25x7-jcpc-96r4/GHSA-25x7-jcpc-96r4.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-25x7-jcpc-96r4", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:47Z", + "aliases": [ + "CVE-2024-8107" + ], + "details": "The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. By default, this can only be exploited by administrators, but the ability to use and configure Slider Revolution can be extended to authors.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8107" + }, + { + "type": "WEB", + "url": "https://www.sliderrevolution.com/documentation/changelog" + }, + { + "type": "WEB", + "url": "https://www.sliderrevolution.com/documentation/changelog/#6-7-19" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/22b59b36-ba47-4c10-8f43-a29ae3b9d446?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T07:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-2cjx-jpg9-5gqm/GHSA-2cjx-jpg9-5gqm.json b/advisories/unreviewed/2024/10/GHSA-2cjx-jpg9-5gqm/GHSA-2cjx-jpg9-5gqm.json new file mode 100644 index 00000000000..aaef9742428 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-2cjx-jpg9-5gqm/GHSA-2cjx-jpg9-5gqm.json @@ -0,0 +1,86 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2cjx-jpg9-5gqm", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-8548" + ], + "details": "The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in all versions up to, and including, 1.6.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbitrary tickets, updating the status of any post, deleting any post, adding notes to tickets, flagging or unflagging tickets, and adding or removing ticket participants.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8548" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L138" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L172" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L211" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L240" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L458" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L531" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L580" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L605" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L630" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L649" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L801" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L869" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5fb90b3b-08bd-4887-a6bf-054b42d3e403?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-324g-rp4q-gr7p/GHSA-324g-rp4q-gr7p.json b/advisories/unreviewed/2024/10/GHSA-324g-rp4q-gr7p/GHSA-324g-rp4q-gr7p.json new file mode 100644 index 00000000000..7b01579187a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-324g-rp4q-gr7p/GHSA-324g-rp4q-gr7p.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-324g-rp4q-gr7p", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8324" + ], + "details": "The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘get_slider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8324" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/xo-liteslider/tags/3.8.6/inc/class-xo-slider.php#L247" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/xo-liteslider/tags/3.8.6/inc/class-xo-slider.php#L315" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/be51c54d-b0f7-42b2-b9b3-1b5832e10a6b?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-3pp3-27wh-qpp3/GHSA-3pp3-27wh-qpp3.json b/advisories/unreviewed/2024/10/GHSA-3pp3-27wh-qpp3/GHSA-3pp3-27wh-qpp3.json new file mode 100644 index 00000000000..63b34700339 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-3pp3-27wh-qpp3/GHSA-3pp3-27wh-qpp3.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3pp3-27wh-qpp3", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8288" + ], + "details": "The Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:guten-post-layout/post-grid' Gutenberg block in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8288" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/guten-post-layout/trunk/src/blocks/post-grid/post-grid.php#L27" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/guten-post-layout/trunk/src/blocks/post-grid/post-grid.php#L300" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/guten-post-layout/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5d6d9852-424a-4d98-9926-e849bef99c2d?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-3xpv-gvv8-7m5h/GHSA-3xpv-gvv8-7m5h.json b/advisories/unreviewed/2024/10/GHSA-3xpv-gvv8-7m5h/GHSA-3xpv-gvv8-7m5h.json new file mode 100644 index 00000000000..403b0b506d1 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-3xpv-gvv8-7m5h/GHSA-3xpv-gvv8-7m5h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3xpv-gvv8-7m5h", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9108" + ], + "details": "The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9108" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wechat-social-login/trunk/includes/social/class-xh-social-wp-api.php?rev=2111074#L39" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/06881386-3c92-426b-948d-58e8a8bee624?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-4858-5pjv-4mwh/GHSA-4858-5pjv-4mwh.json b/advisories/unreviewed/2024/10/GHSA-4858-5pjv-4mwh/GHSA-4858-5pjv-4mwh.json new file mode 100644 index 00000000000..3905134780a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-4858-5pjv-4mwh/GHSA-4858-5pjv-4mwh.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4858-5pjv-4mwh", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-8720" + ], + "details": "The RumbleTalk Live Group Chat – HTML5 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rumbletalk-admin-button' shortcode in all versions up to, and including, 6.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8720" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/rumbletalk-chat-a-chat-with-themes/trank/public/class-rumbletalk-public.php#L128" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e620ae8-03fc-43b5-8e8f-5b0884e8eefb?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-4gvj-wfph-8c6j/GHSA-4gvj-wfph-8c6j.json b/advisories/unreviewed/2024/10/GHSA-4gvj-wfph-8c6j/GHSA-4gvj-wfph-8c6j.json new file mode 100644 index 00000000000..b2400a37f7e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-4gvj-wfph-8c6j/GHSA-4gvj-wfph-8c6j.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4gvj-wfph-8c6j", + "modified": "2024-10-01T09:30:51Z", + "published": "2024-10-01T09:30:51Z", + "aliases": [ + "CVE-2024-9289" + ], + "details": "The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callback() function not properly validating a user's identity prior to authenticating them to the site. This makes it possible for unauthenticated attackers to log in as any user, including administrators, granted they have access to the administrator's email.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9289" + }, + { + "type": "WEB", + "url": "https://codecanyon.net/item/wordpress-woocommerce-affiliate-program/23580333" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ed19835f-2718-41d8-95af-47c8b9589529?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-288" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-4hhh-j69q-9jfh/GHSA-4hhh-j69q-9jfh.json b/advisories/unreviewed/2024/10/GHSA-4hhh-j69q-9jfh/GHSA-4hhh-j69q-9jfh.json new file mode 100644 index 00000000000..aa9d395ddf3 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-4hhh-j69q-9jfh/GHSA-4hhh-j69q-9jfh.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4hhh-j69q-9jfh", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-8990" + ], + "details": "The Geo Mashup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's geo_mashup_visible_posts_list shortcode in all versions up to, and including, 1.13.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8990" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup.php#L1755" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3159868" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3159868/#file0" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/geo-mashup/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/88e74cb2-7b6f-43ac-bb30-4763c5afe493?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-4qx9-m4vj-hq7h/GHSA-4qx9-m4vj-hq7h.json b/advisories/unreviewed/2024/10/GHSA-4qx9-m4vj-hq7h/GHSA-4qx9-m4vj-hq7h.json new file mode 100644 index 00000000000..9b53136b12c --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-4qx9-m4vj-hq7h/GHSA-4qx9-m4vj-hq7h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4qx9-m4vj-hq7h", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-8727" + ], + "details": "The DK PDF plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8727" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/dk-pdf/trunk/includes/class-dkpdf-settings.php#L420" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d71cdd64-7cd6-4b1a-ae8d-e9bf78e630c7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-572v-c6hj-jf7h/GHSA-572v-c6hj-jf7h.json b/advisories/unreviewed/2024/10/GHSA-572v-c6hj-jf7h/GHSA-572v-c6hj-jf7h.json new file mode 100644 index 00000000000..cecccd19d08 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-572v-c6hj-jf7h/GHSA-572v-c6hj-jf7h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-572v-c6hj-jf7h", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9269" + ], + "details": "The Relogo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9269" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/relogo/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12515236-753e-49e8-b8c8-b0c8831c6005?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-5grv-4qg8-xxfq/GHSA-5grv-4qg8-xxfq.json b/advisories/unreviewed/2024/10/GHSA-5grv-4qg8-xxfq/GHSA-5grv-4qg8-xxfq.json new file mode 100644 index 00000000000..e89fa23cdd2 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-5grv-4qg8-xxfq/GHSA-5grv-4qg8-xxfq.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5grv-4qg8-xxfq", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9145" + ], + "details": "Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a \"trusted folder\" within Visual Studio Code, and initiates a manual scan of the file.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9145" + }, + { + "type": "WEB", + "url": "https://marketplace.visualstudio.com/items/WizCloud.wiz-vscode/changelog" + }, + { + "type": "WEB", + "url": "https://marketplace.visualstudio.com/items/WizCloud.wizcli-vscode/changelog" + }, + { + "type": "WEB", + "url": "https://www.wiz.io/security-advisories" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-77" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-5jj7-8xg3-fgc8/GHSA-5jj7-8xg3-fgc8.json b/advisories/unreviewed/2024/10/GHSA-5jj7-8xg3-fgc8/GHSA-5jj7-8xg3-fgc8.json new file mode 100644 index 00000000000..b0a2d00b8d9 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-5jj7-8xg3-fgc8/GHSA-5jj7-8xg3-fgc8.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5jj7-8xg3-fgc8", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8786" + ], + "details": "The Auto Featured Image from Title plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8786" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/auto-featured-image-from-title/trunk/auto-featured-image-from-title.php#L822" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a2bf6102-458f-4930-8880-baa96afb1c15?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-5pwq-wp5g-57fv/GHSA-5pwq-wp5g-57fv.json b/advisories/unreviewed/2024/10/GHSA-5pwq-wp5g-57fv/GHSA-5pwq-wp5g-57fv.json new file mode 100644 index 00000000000..bd3f39b59bc --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-5pwq-wp5g-57fv/GHSA-5pwq-wp5g-57fv.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5pwq-wp5g-57fv", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-8675" + ], + "details": "The Soumettre.fr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the soumettre_disconnect_gateway function in all versions up to, and including, 2.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disconnect the gateway and delete the API key.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8675" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/soumettre-fr/trunk/admin/class-soumettre-admin.php#L276" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ad05b088-977e-4f24-b843-dc65f1aa60e9?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-6q69-wjrh-97pm/GHSA-6q69-wjrh-97pm.json b/advisories/unreviewed/2024/10/GHSA-6q69-wjrh-97pm/GHSA-6q69-wjrh-97pm.json new file mode 100644 index 00000000000..9f8e07bcd5d --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-6q69-wjrh-97pm/GHSA-6q69-wjrh-97pm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6q69-wjrh-97pm", + "modified": "2024-10-01T09:30:51Z", + "published": "2024-10-01T09:30:51Z", + "aliases": [ + "CVE-2024-9265" + ], + "details": "The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_header_sent() function. This makes it possible for unauthenticated attackers to register as an administrator.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9265" + }, + { + "type": "WEB", + "url": "https://codecanyon.net/item/echo-rss-feed-post-generator-plugin-for-wordpress/19486974" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c099f401-4b05-4532-8e31-af1b1dea7eca?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-7wcp-q9jj-q496/GHSA-7wcp-q9jj-q496.json b/advisories/unreviewed/2024/10/GHSA-7wcp-q9jj-q496/GHSA-7wcp-q9jj-q496.json new file mode 100644 index 00000000000..f4a89978894 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-7wcp-q9jj-q496/GHSA-7wcp-q9jj-q496.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7wcp-q9jj-q496", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-7433" + ], + "details": "The Empowerment theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.2 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7433" + }, + { + "type": "WEB", + "url": "https://wordpress.org/themes/empowerment" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3d96d38a-7f0e-4e47-ba49-727705eaaac6?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-88rw-gmxx-j2pc/GHSA-88rw-gmxx-j2pc.json b/advisories/unreviewed/2024/10/GHSA-88rw-gmxx-j2pc/GHSA-88rw-gmxx-j2pc.json new file mode 100644 index 00000000000..a771fec6088 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-88rw-gmxx-j2pc/GHSA-88rw-gmxx-j2pc.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-88rw-gmxx-j2pc", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-7434" + ], + "details": "The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7434" + }, + { + "type": "WEB", + "url": "https://wordpress.org/themes/ultrapress" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c9cf97a6-38bb-4499-98f0-ca2b7111f654?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-8xgh-92p8-484p/GHSA-8xgh-92p8-484p.json b/advisories/unreviewed/2024/10/GHSA-8xgh-92p8-484p/GHSA-8xgh-92p8-484p.json new file mode 100644 index 00000000000..3fc3858d3a1 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-8xgh-92p8-484p/GHSA-8xgh-92p8-484p.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8xgh-92p8-484p", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8799" + ], + "details": "The Custom Banners plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8799" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/custom-banners/trunk/include/tgmpa/init.php#L96" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/49618d9f-e6d8-40d5-b19f-7ce987939172?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-96c4-3cv2-j54p/GHSA-96c4-3cv2-j54p.json b/advisories/unreviewed/2024/10/GHSA-96c4-3cv2-j54p/GHSA-96c4-3cv2-j54p.json new file mode 100644 index 00000000000..8c5f002b5d1 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-96c4-3cv2-j54p/GHSA-96c4-3cv2-j54p.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-96c4-3cv2-j54p", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9267" + ], + "details": "The Easy WordPress Subscribe – Optin Hound plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9267" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/opt-in-hound/trunk/includes/subscribers/views/view-submenu-page-subscribers.php#L17" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/opt-in-hound/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b91ec428-8444-4304-8901-4bc3ef146e3e?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-c3q3-8w92-6623/GHSA-c3q3-8w92-6623.json b/advisories/unreviewed/2024/10/GHSA-c3q3-8w92-6623/GHSA-c3q3-8w92-6623.json new file mode 100644 index 00000000000..bb9b554ac26 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-c3q3-8w92-6623/GHSA-c3q3-8w92-6623.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c3q3-8w92-6623", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9119" + ], + "details": "The SVG Complete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9119" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/svg-complete/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0f8e1495-c5e1-4bb9-92e9-b27b9b997a5f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-c7wh-633w-r3r6/GHSA-c7wh-633w-r3r6.json b/advisories/unreviewed/2024/10/GHSA-c7wh-633w-r3r6/GHSA-c7wh-633w-r3r6.json new file mode 100644 index 00000000000..fe86a18340a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-c7wh-633w-r3r6/GHSA-c7wh-633w-r3r6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c7wh-633w-r3r6", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-7869" + ], + "details": "The 123.chat - Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7869" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/123-chat-videochat/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1d4469e4-5d99-4a56-bde8-9a0aaca7794f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-c9j6-rm6x-5mq3/GHSA-c9j6-rm6x-5mq3.json b/advisories/unreviewed/2024/10/GHSA-c9j6-rm6x-5mq3/GHSA-c9j6-rm6x-5mq3.json new file mode 100644 index 00000000000..6726a74dbef --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-c9j6-rm6x-5mq3/GHSA-c9j6-rm6x-5mq3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c9j6-rm6x-5mq3", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9304" + ], + "details": "The LocateAndFilter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9304" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/locateandfilter/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a10ee67a-7f5f-43dd-8f5c-c0e92706c453?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-f3qm-hjm2-w89q/GHSA-f3qm-hjm2-w89q.json b/advisories/unreviewed/2024/10/GHSA-f3qm-hjm2-w89q/GHSA-f3qm-hjm2-w89q.json new file mode 100644 index 00000000000..38fe92677a2 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-f3qm-hjm2-w89q/GHSA-f3qm-hjm2-w89q.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f3qm-hjm2-w89q", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9274" + ], + "details": "The Elastik Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9274" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/elastik-page-builder/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/315687d4-9125-440b-9d53-81d71e56d4ef?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-f6w4-8mf4-6h43/GHSA-f6w4-8mf4-6h43.json b/advisories/unreviewed/2024/10/GHSA-f6w4-8mf4-6h43/GHSA-f6w4-8mf4-6h43.json new file mode 100644 index 00000000000..8823229a415 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-f6w4-8mf4-6h43/GHSA-f6w4-8mf4-6h43.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f6w4-8mf4-6h43", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-8728" + ], + "details": "The Easy Load More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8728" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/easy-load-more/trunk/includes/class-easy-load-more-settings.php#L268" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d890e7a5-ea9f-40e5-9549-a6f26421b043?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-fcff-4m68-vv98/GHSA-fcff-4m68-vv98.json b/advisories/unreviewed/2024/10/GHSA-fcff-4m68-vv98/GHSA-fcff-4m68-vv98.json new file mode 100644 index 00000000000..1388597dbf8 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-fcff-4m68-vv98/GHSA-fcff-4m68-vv98.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fcff-4m68-vv98", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9220" + ], + "details": "The LH Copy Media File plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.08. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9220" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/lh-copy-media-file/trunk/lh-copy-media-file.php#L31" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9911e99e-0b3b-4be1-b8cd-28593b6d12ad?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-gp5m-f36h-4mw3/GHSA-gp5m-f36h-4mw3.json b/advisories/unreviewed/2024/10/GHSA-gp5m-f36h-4mw3/GHSA-gp5m-f36h-4mw3.json new file mode 100644 index 00000000000..cb4ea1fb6d6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-gp5m-f36h-4mw3/GHSA-gp5m-f36h-4mw3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gp5m-f36h-4mw3", + "modified": "2024-10-01T09:30:51Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9241" + ], + "details": "The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9241" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/pdf-image-generator/tags/1.5.6/pdf-image-generator.php#L329" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1454af30-319a-44b7-a83e-2d774cfbc8d1?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-jm63-gfmj-678f/GHSA-jm63-gfmj-678f.json b/advisories/unreviewed/2024/10/GHSA-jm63-gfmj-678f/GHSA-jm63-gfmj-678f.json new file mode 100644 index 00000000000..1ea2d3e72d9 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-jm63-gfmj-678f/GHSA-jm63-gfmj-678f.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jm63-gfmj-678f", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8430" + ], + "details": "The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8430" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/spice-starter-sites/tags/1.2.5/spice-starter-sites.php#L1123" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ec52337f-bdd1-4632-853b-da86d64751e7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-mr5r-968f-9m2f/GHSA-mr5r-968f-9m2f.json b/advisories/unreviewed/2024/10/GHSA-mr5r-968f-9m2f/GHSA-mr5r-968f-9m2f.json new file mode 100644 index 00000000000..5795b4e59c1 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-mr5r-968f-9m2f/GHSA-mr5r-968f-9m2f.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mr5r-968f-9m2f", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-8632" + ], + "details": "The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbs_ajax_load_front_end_replies' and 'kbs_ajax_mark_reply_as_read' functions in all versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to read replies of any ticket, and mark any reply as read.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8632" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L342" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L439" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/767b1234-5b4a-4baa-9048-7b2e413cdba5?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-p726-x3jw-jj27/GHSA-p726-x3jw-jj27.json b/advisories/unreviewed/2024/10/GHSA-p726-x3jw-jj27/GHSA-p726-x3jw-jj27.json new file mode 100644 index 00000000000..41063b25cd7 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-p726-x3jw-jj27/GHSA-p726-x3jw-jj27.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p726-x3jw-jj27", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9209" + ], + "details": "The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9209" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/search-analytics/tags/1.4.9/admin/includes/class.stats-table.php#L153" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/275268d6-5b08-441d-9924-3c99682b27d4?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-pxxv-92q8-v4m7/GHSA-pxxv-92q8-v4m7.json b/advisories/unreviewed/2024/10/GHSA-pxxv-92q8-v4m7/GHSA-pxxv-92q8-v4m7.json new file mode 100644 index 00000000000..039f6d5c674 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-pxxv-92q8-v4m7/GHSA-pxxv-92q8-v4m7.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pxxv-92q8-v4m7", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9018" + ], + "details": "The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘key’ parameter in all versions up to, and including, 4.8.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9018" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-easy-gallery/trunk/wp-easy-gallery.php#L866" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/wp-easy-gallery/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1c4c632-66f2-4987-b7da-048dbe4a3044?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-r9g6-wcjx-jmg8/GHSA-r9g6-wcjx-jmg8.json b/advisories/unreviewed/2024/10/GHSA-r9g6-wcjx-jmg8/GHSA-r9g6-wcjx-jmg8.json new file mode 100644 index 00000000000..32d7d7caaec --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-r9g6-wcjx-jmg8/GHSA-r9g6-wcjx-jmg8.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r9g6-wcjx-jmg8", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-8793" + ], + "details": "The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8793" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/woocommerce-exporter/tags/2.7.2.1/includes/settings.php#L195" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d3c44eb-ef25-43f5-a872-6ef52c3d9c1f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-v3qj-hv3w-mwh8/GHSA-v3qj-hv3w-mwh8.json b/advisories/unreviewed/2024/10/GHSA-v3qj-hv3w-mwh8/GHSA-v3qj-hv3w-mwh8.json new file mode 100644 index 00000000000..c4c4d09fa25 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-v3qj-hv3w-mwh8/GHSA-v3qj-hv3w-mwh8.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v3qj-hv3w-mwh8", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-8718" + ], + "details": "The Gravity Forms Toolbar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8718" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/gravity-forms-toolbar/tags/1.7.0/admin/form.php#L25" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/gravity-forms-toolbar/tags/1.7.0/admin/form.php#L44" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d1c6daf-1799-4f8a-81e3-ef3968f41b8e?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-v493-jrcx-3c4x/GHSA-v493-jrcx-3c4x.json b/advisories/unreviewed/2024/10/GHSA-v493-jrcx-3c4x/GHSA-v493-jrcx-3c4x.json new file mode 100644 index 00000000000..7e0797b0ea1 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-v493-jrcx-3c4x/GHSA-v493-jrcx-3c4x.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v493-jrcx-3c4x", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-9272" + ], + "details": "The R Animated Icon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9272" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/r-animated-icon/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/56fd8166-da22-4a0b-a23f-41817acba6df?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-v9xw-x7f7-qppq/GHSA-v9xw-x7f7-qppq.json b/advisories/unreviewed/2024/10/GHSA-v9xw-x7f7-qppq/GHSA-v9xw-x7f7-qppq.json new file mode 100644 index 00000000000..14ba9c0150e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-v9xw-x7f7-qppq/GHSA-v9xw-x7f7-qppq.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v9xw-x7f7-qppq", + "modified": "2024-10-01T09:30:48Z", + "published": "2024-10-01T09:30:48Z", + "aliases": [ + "CVE-2024-7432" + ], + "details": "The Unseen Blog theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7432" + }, + { + "type": "WEB", + "url": "https://wordpress.org/themes/unseen-blog" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1a14b86f-a5c8-4ec2-9940-68a37a6c4a86?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-w4g5-wwhq-79mp/GHSA-w4g5-wwhq-79mp.json b/advisories/unreviewed/2024/10/GHSA-w4g5-wwhq-79mp/GHSA-w4g5-wwhq-79mp.json new file mode 100644 index 00000000000..71857f1da9c --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w4g5-wwhq-79mp/GHSA-w4g5-wwhq-79mp.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w4g5-wwhq-79mp", + "modified": "2024-10-01T09:30:50Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9228" + ], + "details": "The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is only exploitable when the leave a review notice is present.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9228" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/loggedin/tags/1.3.1/includes/class-loggedin-admin.php#L255" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/59707c64-a34c-45bc-bbbe-d447fe2ca6ab?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-w5mm-q3mg-9fmf/GHSA-w5mm-q3mg-9fmf.json b/advisories/unreviewed/2024/10/GHSA-w5mm-q3mg-9fmf/GHSA-w5mm-q3mg-9fmf.json new file mode 100644 index 00000000000..34506e75d0e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w5mm-q3mg-9fmf/GHSA-w5mm-q3mg-9fmf.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w5mm-q3mg-9fmf", + "modified": "2024-10-01T09:30:49Z", + "published": "2024-10-01T09:30:49Z", + "aliases": [ + "CVE-2024-8989" + ], + "details": "The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stars_testimonials shortcode in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8989" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/stars-testimonials-with-slider-and-masonry-grid/trunk/plugin.class.php#L1281" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3159818" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3159818/#file8" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/stars-testimonials-with-slider-and-masonry-grid/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b406f0b8-16b5-49ca-88d8-7717bef1ae61?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T08:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-w8x6-88rf-9hhp/GHSA-w8x6-88rf-9hhp.json b/advisories/unreviewed/2024/10/GHSA-w8x6-88rf-9hhp/GHSA-w8x6-88rf-9hhp.json new file mode 100644 index 00000000000..df0aa7f3d7a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w8x6-88rf-9hhp/GHSA-w8x6-88rf-9hhp.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w8x6-88rf-9hhp", + "modified": "2024-10-01T09:30:51Z", + "published": "2024-10-01T09:30:50Z", + "aliases": [ + "CVE-2024-9224" + ], + "details": "The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9224" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hello-world/tags/2.1.1/hello-world.php#L113" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hello-world/tags/2.1.1/hello-world.php#L35" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2f58df1f-66f7-4e3d-af6d-08174653a2ad?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-01T09:15:07Z" + } +} \ No newline at end of file