diff --git a/advisories/unreviewed/2023/08/GHSA-x3cm-94m2-6vw4/GHSA-x3cm-94m2-6vw4.json b/advisories/unreviewed/2023/08/GHSA-x3cm-94m2-6vw4/GHSA-x3cm-94m2-6vw4.json
index e0f43dee38d..fbc149b474a 100644
--- a/advisories/unreviewed/2023/08/GHSA-x3cm-94m2-6vw4/GHSA-x3cm-94m2-6vw4.json
+++ b/advisories/unreviewed/2023/08/GHSA-x3cm-94m2-6vw4/GHSA-x3cm-94m2-6vw4.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2023/10/GHSA-4j9w-xhrc-q5vq/GHSA-4j9w-xhrc-q5vq.json b/advisories/unreviewed/2023/10/GHSA-4j9w-xhrc-q5vq/GHSA-4j9w-xhrc-q5vq.json
index 0dc858d8d96..44aeb509c7c 100644
--- a/advisories/unreviewed/2023/10/GHSA-4j9w-xhrc-q5vq/GHSA-4j9w-xhrc-q5vq.json
+++ b/advisories/unreviewed/2023/10/GHSA-4j9w-xhrc-q5vq/GHSA-4j9w-xhrc-q5vq.json
@@ -28,6 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-120",
       "CWE-77",
       "CWE-78"
     ],
diff --git a/advisories/unreviewed/2023/10/GHSA-wjgc-gw8v-m4vg/GHSA-wjgc-gw8v-m4vg.json b/advisories/unreviewed/2023/10/GHSA-wjgc-gw8v-m4vg/GHSA-wjgc-gw8v-m4vg.json
index eefb01cc99c..f2eb40332fb 100644
--- a/advisories/unreviewed/2023/10/GHSA-wjgc-gw8v-m4vg/GHSA-wjgc-gw8v-m4vg.json
+++ b/advisories/unreviewed/2023/10/GHSA-wjgc-gw8v-m4vg/GHSA-wjgc-gw8v-m4vg.json
@@ -28,6 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-120",
       "CWE-77"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/08/GHSA-78wv-wpmf-ghfp/GHSA-78wv-wpmf-ghfp.json b/advisories/unreviewed/2024/08/GHSA-78wv-wpmf-ghfp/GHSA-78wv-wpmf-ghfp.json
index 897289aeb09..b69a80e7341 100644
--- a/advisories/unreviewed/2024/08/GHSA-78wv-wpmf-ghfp/GHSA-78wv-wpmf-ghfp.json
+++ b/advisories/unreviewed/2024/08/GHSA-78wv-wpmf-ghfp/GHSA-78wv-wpmf-ghfp.json
@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/10/GHSA-35q7-h93f-grfr/GHSA-35q7-h93f-grfr.json b/advisories/unreviewed/2024/10/GHSA-35q7-h93f-grfr/GHSA-35q7-h93f-grfr.json
new file mode 100644
index 00000000000..1f5d594e782
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-35q7-h93f-grfr/GHSA-35q7-h93f-grfr.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-35q7-h93f-grfr",
+  "modified": "2024-10-08T12:30:21Z",
+  "published": "2024-10-08T12:30:21Z",
+  "aliases": [
+    "CVE-2024-8629"
+  ],
+  "details": "The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.3.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8629"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/woocommerce-multilingual/tags/5.3.7/inc/class-wcml-comments.php#L257"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3164233/woocommerce-multilingual/trunk/inc/class-wcml-comments.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/494dc869-6f4d-428b-99a8-87212f3007be?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T10:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-47jx-4vx3-m8j8/GHSA-47jx-4vx3-m8j8.json b/advisories/unreviewed/2024/10/GHSA-47jx-4vx3-m8j8/GHSA-47jx-4vx3-m8j8.json
new file mode 100644
index 00000000000..937082b3278
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-47jx-4vx3-m8j8/GHSA-47jx-4vx3-m8j8.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-47jx-4vx3-m8j8",
+  "modified": "2024-10-08T12:30:21Z",
+  "published": "2024-10-08T12:30:21Z",
+  "aliases": [
+    "CVE-2024-3506"
+  ],
+  "details": "A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3506"
+    },
+    {
+      "type": "WEB",
+      "url": "https://supportcommunity.milestonesys.com/KBRedir?art=000065801&lang=en_US"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T10:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-4j7f-w856-r2v2/GHSA-4j7f-w856-r2v2.json b/advisories/unreviewed/2024/10/GHSA-4j7f-w856-r2v2/GHSA-4j7f-w856-r2v2.json
new file mode 100644
index 00000000000..8e596af68bf
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-4j7f-w856-r2v2/GHSA-4j7f-w856-r2v2.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4j7f-w856-r2v2",
+  "modified": "2024-10-08T12:30:21Z",
+  "published": "2024-10-08T12:30:21Z",
+  "aliases": [
+    "CVE-2024-8422"
+  ],
+  "details": "CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial\nof service and loss of confidentiality & integrity when application user opens a malicious Zelio\nSoft 2 project file.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8422"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-06.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T10:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-6339-gv7w-g5f4/GHSA-6339-gv7w-g5f4.json b/advisories/unreviewed/2024/10/GHSA-6339-gv7w-g5f4/GHSA-6339-gv7w-g5f4.json
index c20b10b6164..7921c52952e 100644
--- a/advisories/unreviewed/2024/10/GHSA-6339-gv7w-g5f4/GHSA-6339-gv7w-g5f4.json
+++ b/advisories/unreviewed/2024/10/GHSA-6339-gv7w-g5f4/GHSA-6339-gv7w-g5f4.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6339-gv7w-g5f4",
-  "modified": "2024-10-08T06:30:47Z",
+  "modified": "2024-10-08T12:30:21Z",
   "published": "2024-10-08T06:30:47Z",
   "aliases": [
     "CVE-2024-45277"
@@ -28,6 +28,10 @@
     {
       "type": "WEB",
       "url": "https://url.sap/sapsecuritypatchday"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.npmjs.com/package/@sap/hana-client?activeTab=code"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/10/GHSA-6p6j-9vgw-x522/GHSA-6p6j-9vgw-x522.json b/advisories/unreviewed/2024/10/GHSA-6p6j-9vgw-x522/GHSA-6p6j-9vgw-x522.json
new file mode 100644
index 00000000000..45a236dbe99
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-6p6j-9vgw-x522/GHSA-6p6j-9vgw-x522.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6p6j-9vgw-x522",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-8482"
+  ],
+  "details": "The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8482"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.3.987/modules/team-member/widgets/wpr-team-member.php?rev=3162784"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/modules/team-member/widgets/wpr-team-member.php#L1746"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5ccece54-18fa-42e4-ba1a-d0879b73d66d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T12:15:03Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-7cfq-84qm-pqqw/GHSA-7cfq-84qm-pqqw.json b/advisories/unreviewed/2024/10/GHSA-7cfq-84qm-pqqw/GHSA-7cfq-84qm-pqqw.json
new file mode 100644
index 00000000000..7aa51b05758
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-7cfq-84qm-pqqw/GHSA-7cfq-84qm-pqqw.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7cfq-84qm-pqqw",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-8488"
+  ],
+  "details": "The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Survey fields in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8488"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3155029/survey-maker/tags/4.9.6/includes/class-survey-maker-data.php?old=3153722&old_path=survey-maker%2Ftags%2F4.9.5%2Fincludes%2Fclass-survey-maker-data.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5e04edb6-ef37-4ea8-a734-dbdcf689ba9b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T11:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-cpq2-2prg-7ccv/GHSA-cpq2-2prg-7ccv.json b/advisories/unreviewed/2024/10/GHSA-cpq2-2prg-7ccv/GHSA-cpq2-2prg-7ccv.json
new file mode 100644
index 00000000000..5bf2a8397f0
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-cpq2-2prg-7ccv/GHSA-cpq2-2prg-7ccv.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cpq2-2prg-7ccv",
+  "modified": "2024-10-08T12:30:21Z",
+  "published": "2024-10-08T12:30:21Z",
+  "aliases": [
+    "CVE-2024-8433"
+  ],
+  "details": "The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘themehunk_megamenu_bg_image' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Please note that this was partially fixed in 1.1.0 due to the missing authorization protection that was added.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8433"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/themehunk-megamenu-plus/tags/1.1.0/views/admin/item_settings.php?rev=3156084#L196"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/themehunk-megamenu-plus/trunk/inc/megamenu-base.php#L35"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3163871%40themehunk-megamenu-plus&new=3163871%40themehunk-megamenu-plus&sfp_email=&sfph_mail=#file21"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fc661cfd-6290-4b36-858a-cf2269b5fcf9?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T10:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-gjr7-99gv-frxx/GHSA-gjr7-99gv-frxx.json b/advisories/unreviewed/2024/10/GHSA-gjr7-99gv-frxx/GHSA-gjr7-99gv-frxx.json
new file mode 100644
index 00000000000..a9e95923371
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-gjr7-99gv-frxx/GHSA-gjr7-99gv-frxx.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gjr7-99gv-frxx",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-8884"
+  ],
+  "details": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that\ncould cause exposure of credentials when attacker has access to application on network over\nhttp",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8884"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-07&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-07.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T11:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-h25j-66v8-m35v/GHSA-h25j-66v8-m35v.json b/advisories/unreviewed/2024/10/GHSA-h25j-66v8-m35v/GHSA-h25j-66v8-m35v.json
new file mode 100644
index 00000000000..27122c38fef
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-h25j-66v8-m35v/GHSA-h25j-66v8-m35v.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h25j-66v8-m35v",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-9005"
+  ],
+  "details": "CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be\nremotely executed on the server when unsafely deserialized data is posted to the web server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9005"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-05.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T11:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-j6rp-5g87-ghhj/GHSA-j6rp-5g87-ghhj.json b/advisories/unreviewed/2024/10/GHSA-j6rp-5g87-ghhj/GHSA-j6rp-5g87-ghhj.json
new file mode 100644
index 00000000000..6ec426aa7cf
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-j6rp-5g87-ghhj/GHSA-j6rp-5g87-ghhj.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j6rp-5g87-ghhj",
+  "modified": "2024-10-08T12:30:21Z",
+  "published": "2024-10-08T12:30:21Z",
+  "aliases": [
+    "CVE-2024-8518"
+  ],
+  "details": "CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft\n2 application when a specially crafted project file is loaded by an application user.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8518"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-06.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T10:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-r9m6-m627-3wfv/GHSA-r9m6-m627-3wfv.json b/advisories/unreviewed/2024/10/GHSA-r9m6-m627-3wfv/GHSA-r9m6-m627-3wfv.json
new file mode 100644
index 00000000000..5fc7c3ea88c
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-r9m6-m627-3wfv/GHSA-r9m6-m627-3wfv.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r9m6-m627-3wfv",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-8431"
+  ],
+  "details": "The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve private post titles.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8431"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/robo-gallery/tags/3.2.21/includes/extensions/block/src/init.php#L105"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3162670/robo-gallery/trunk/includes/extensions/block/src/init.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/632c0a1a-6ac2-44c3-b66c-44fa4cf05b2d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T12:15:02Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/10/GHSA-rpm2-gj54-rqvf/GHSA-rpm2-gj54-rqvf.json b/advisories/unreviewed/2024/10/GHSA-rpm2-gj54-rqvf/GHSA-rpm2-gj54-rqvf.json
new file mode 100644
index 00000000000..d066460c231
--- /dev/null
+++ b/advisories/unreviewed/2024/10/GHSA-rpm2-gj54-rqvf/GHSA-rpm2-gj54-rqvf.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rpm2-gj54-rqvf",
+  "modified": "2024-10-08T12:30:22Z",
+  "published": "2024-10-08T12:30:22Z",
+  "aliases": [
+    "CVE-2024-9207"
+  ],
+  "details": "The BuddyPress Docs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9207"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/buddypress-docs/tags/2.2.3/includes/addon-history.php#L368"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/buddypress-docs/tags/2.2.3/includes/templatetags.php#L282"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3162780/#file32"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3162780/#file4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2181c89-4f40-45b9-8c12-448ca263a2f2?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-10-08T11:15:13Z"
+  }
+}
\ No newline at end of file