From a881675883be438d371f36034637ccbb8453ec34 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 13 Dec 2024 12:33:11 +0000
Subject: [PATCH] Publish Advisories

GHSA-r9wf-7v4g-f656
GHSA-2j25-pjp3-6786
GHSA-2m3m-xv57-xrmm
GHSA-4gfm-4g53-grgf
GHSA-4prf-x4pq-45w4
GHSA-56mm-vmx4-jpm3
GHSA-5wc6-6p3c-6qx2
GHSA-7q77-4259-6r93
GHSA-8cvv-3p2p-xx9w
GHSA-8h7j-r9xc-j47m
GHSA-fp7r-c8g8-g8jc
GHSA-fqh4-5w83-h9mv
GHSA-jrvp-2cf5-695g
GHSA-pmp6-xcw2-wmp6
GHSA-qrwv-895c-pv4v
GHSA-r83p-g228-gq84
GHSA-rjx4-8gxj-w5gj
GHSA-v6wv-qmhq-j5mp
GHSA-w38j-p59r-qv5r
---
 .../GHSA-r9wf-7v4g-f656.json                  |  6 +-
 .../GHSA-2j25-pjp3-6786.json                  | 36 ++++++++++++
 .../GHSA-2m3m-xv57-xrmm.json                  | 36 ++++++++++++
 .../GHSA-4gfm-4g53-grgf.json                  | 36 ++++++++++++
 .../GHSA-4prf-x4pq-45w4.json                  | 36 ++++++++++++
 .../GHSA-56mm-vmx4-jpm3.json                  | 48 ++++++++++++++++
 .../GHSA-5wc6-6p3c-6qx2.json                  | 36 ++++++++++++
 .../GHSA-7q77-4259-6r93.json                  | 36 ++++++++++++
 .../GHSA-8cvv-3p2p-xx9w.json                  | 36 ++++++++++++
 .../GHSA-8h7j-r9xc-j47m.json                  | 44 +++++++++++++++
 .../GHSA-fp7r-c8g8-g8jc.json                  | 36 ++++++++++++
 .../GHSA-fqh4-5w83-h9mv.json                  | 36 ++++++++++++
 .../GHSA-jrvp-2cf5-695g.json                  | 40 +++++++++++++
 .../GHSA-pmp6-xcw2-wmp6.json                  | 40 +++++++++++++
 .../GHSA-qrwv-895c-pv4v.json                  | 56 +++++++++++++++++++
 .../GHSA-r83p-g228-gq84.json                  | 36 ++++++++++++
 .../GHSA-rjx4-8gxj-w5gj.json                  | 40 +++++++++++++
 .../GHSA-v6wv-qmhq-j5mp.json                  | 36 ++++++++++++
 .../GHSA-w38j-p59r-qv5r.json                  | 40 +++++++++++++
 19 files changed, 709 insertions(+), 1 deletion(-)
 create mode 100644 advisories/unreviewed/2024/12/GHSA-2j25-pjp3-6786/GHSA-2j25-pjp3-6786.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-2m3m-xv57-xrmm/GHSA-2m3m-xv57-xrmm.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-4gfm-4g53-grgf/GHSA-4gfm-4g53-grgf.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-4prf-x4pq-45w4/GHSA-4prf-x4pq-45w4.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-56mm-vmx4-jpm3/GHSA-56mm-vmx4-jpm3.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-5wc6-6p3c-6qx2/GHSA-5wc6-6p3c-6qx2.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-7q77-4259-6r93/GHSA-7q77-4259-6r93.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-8cvv-3p2p-xx9w/GHSA-8cvv-3p2p-xx9w.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-8h7j-r9xc-j47m/GHSA-8h7j-r9xc-j47m.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-fp7r-c8g8-g8jc/GHSA-fp7r-c8g8-g8jc.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-fqh4-5w83-h9mv/GHSA-fqh4-5w83-h9mv.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-jrvp-2cf5-695g/GHSA-jrvp-2cf5-695g.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-pmp6-xcw2-wmp6/GHSA-pmp6-xcw2-wmp6.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-qrwv-895c-pv4v/GHSA-qrwv-895c-pv4v.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-r83p-g228-gq84/GHSA-r83p-g228-gq84.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-rjx4-8gxj-w5gj/GHSA-rjx4-8gxj-w5gj.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-v6wv-qmhq-j5mp/GHSA-v6wv-qmhq-j5mp.json
 create mode 100644 advisories/unreviewed/2024/12/GHSA-w38j-p59r-qv5r/GHSA-w38j-p59r-qv5r.json

diff --git a/advisories/unreviewed/2024/02/GHSA-r9wf-7v4g-f656/GHSA-r9wf-7v4g-f656.json b/advisories/unreviewed/2024/02/GHSA-r9wf-7v4g-f656/GHSA-r9wf-7v4g-f656.json
index bf8138650f9..bb5f393fdfa 100644
--- a/advisories/unreviewed/2024/02/GHSA-r9wf-7v4g-f656/GHSA-r9wf-7v4g-f656.json
+++ b/advisories/unreviewed/2024/02/GHSA-r9wf-7v4g-f656/GHSA-r9wf-7v4g-f656.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r9wf-7v4g-f656",
-  "modified": "2024-11-05T00:31:25Z",
+  "modified": "2024-12-13T12:31:46Z",
   "published": "2024-02-29T03:33:17Z",
   "aliases": [
     "CVE-2024-21726"
@@ -22,6 +22,10 @@
     {
       "type": "WEB",
       "url": "https://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.sonarsource.com/blog/joomla-multiple-xss-vulnerabilities"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/12/GHSA-2j25-pjp3-6786/GHSA-2j25-pjp3-6786.json b/advisories/unreviewed/2024/12/GHSA-2j25-pjp3-6786/GHSA-2j25-pjp3-6786.json
new file mode 100644
index 00000000000..29ada3ebf54
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-2j25-pjp3-6786/GHSA-2j25-pjp3-6786.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2j25-pjp3-6786",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52059"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.17.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52059"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52059"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-2m3m-xv57-xrmm/GHSA-2m3m-xv57-xrmm.json b/advisories/unreviewed/2024/12/GHSA-2m3m-xv57-xrmm/GHSA-2m3m-xv57-xrmm.json
new file mode 100644
index 00000000000..32ddb22576c
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-2m3m-xv57-xrmm/GHSA-2m3m-xv57-xrmm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2m3m-xv57-xrmm",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-52065"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional on non-Windows (Persistence Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.1.2 before 6.1.2.21, from 5.3.1.40 before 5.3.1.41.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52065"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52065"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-4gfm-4g53-grgf/GHSA-4gfm-4g53-grgf.json b/advisories/unreviewed/2024/12/GHSA-4gfm-4g53-grgf/GHSA-4gfm-4g53-grgf.json
new file mode 100644
index 00000000000..6d5741c2307
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-4gfm-4g53-grgf/GHSA-4gfm-4g53-grgf.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4gfm-4g53-grgf",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2021-32007"
+  ],
+  "details": "This issue affects:\nSecomea GateManager\nVersion 9.5 and all prior versions.\nProtection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32007"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.secomea.com/support/cybersecurity-advisory"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-4prf-x4pq-45w4/GHSA-4prf-x4pq-45w4.json b/advisories/unreviewed/2024/12/GHSA-4prf-x4pq-45w4/GHSA-4prf-x4pq-45w4.json
new file mode 100644
index 00000000000..b477505a756
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-4prf-x4pq-45w4/GHSA-4prf-x4pq-45w4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4prf-x4pq-45w4",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-52066"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52066"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52066"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-56mm-vmx4-jpm3/GHSA-56mm-vmx4-jpm3.json b/advisories/unreviewed/2024/12/GHSA-56mm-vmx4-jpm3/GHSA-56mm-vmx4-jpm3.json
new file mode 100644
index 00000000000..58c2c00ebd1
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-56mm-vmx4-jpm3/GHSA-56mm-vmx4-jpm3.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-56mm-vmx4-jpm3",
+  "modified": "2024-12-13T12:31:46Z",
+  "published": "2024-12-13T12:31:46Z",
+  "aliases": [
+    "CVE-2024-11012"
+  ],
+  "details": "The The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via njt_nofi_text AJAX action in all versions up to, and including, 2.1.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11012"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/notibar/trunk/includes/NotificationBar/WpCustomNotification.php#L90"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3205224"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/notibar/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1766727d-ba54-4b46-b362-415c14be027d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T10:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-5wc6-6p3c-6qx2/GHSA-5wc6-6p3c-6qx2.json b/advisories/unreviewed/2024/12/GHSA-5wc6-6p3c-6qx2/GHSA-5wc6-6p3c-6qx2.json
new file mode 100644
index 00000000000..1e240945a54
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-5wc6-6p3c-6qx2/GHSA-5wc6-6p3c-6qx2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5wc6-6p3c-6qx2",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52063"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52063"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52063"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-7q77-4259-6r93/GHSA-7q77-4259-6r93.json b/advisories/unreviewed/2024/12/GHSA-7q77-4259-6r93/GHSA-7q77-4259-6r93.json
new file mode 100644
index 00000000000..4fb07f91474
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-7q77-4259-6r93/GHSA-7q77-4259-6r93.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7q77-4259-6r93",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52060"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52060"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52060"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-8cvv-3p2p-xx9w/GHSA-8cvv-3p2p-xx9w.json b/advisories/unreviewed/2024/12/GHSA-8cvv-3p2p-xx9w/GHSA-8cvv-3p2p-xx9w.json
new file mode 100644
index 00000000000..3100cbf0ee2
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-8cvv-3p2p-xx9w/GHSA-8cvv-3p2p-xx9w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8cvv-3p2p-xx9w",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52061"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52061"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52061"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-8h7j-r9xc-j47m/GHSA-8h7j-r9xc-j47m.json b/advisories/unreviewed/2024/12/GHSA-8h7j-r9xc-j47m/GHSA-8h7j-r9xc-j47m.json
new file mode 100644
index 00000000000..44912b4c52c
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-8h7j-r9xc-j47m/GHSA-8h7j-r9xc-j47m.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8h7j-r9xc-j47m",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-11827"
+  ],
+  "details": "The Out of the Block: OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ootb_query shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11827"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/ootb-openstreetmap/tags/2.8.3/includes/classes/Query.php#L283"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/ootb-openstreetmap/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c67c958e-1ab2-498c-b665-73e239d0029b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T12:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-fp7r-c8g8-g8jc/GHSA-fp7r-c8g8-g8jc.json b/advisories/unreviewed/2024/12/GHSA-fp7r-c8g8-g8jc/GHSA-fp7r-c8g8-g8jc.json
new file mode 100644
index 00000000000..08ba2e78fa1
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-fp7r-c8g8-g8jc/GHSA-fp7r-c8g8-g8jc.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fp7r-c8g8-g8jc",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52062"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52062"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52062"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-fqh4-5w83-h9mv/GHSA-fqh4-5w83-h9mv.json b/advisories/unreviewed/2024/12/GHSA-fqh4-5w83-h9mv/GHSA-fqh4-5w83-h9mv.json
new file mode 100644
index 00000000000..540159a6c14
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-fqh4-5w83-h9mv/GHSA-fqh4-5w83-h9mv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fqh4-5w83-h9mv",
+  "modified": "2024-12-13T12:31:47Z",
+  "published": "2024-12-13T12:31:47Z",
+  "aliases": [
+    "CVE-2024-52057"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0.*, from 5.2.0 before 5.3.*.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52057"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52057"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T10:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-jrvp-2cf5-695g/GHSA-jrvp-2cf5-695g.json b/advisories/unreviewed/2024/12/GHSA-jrvp-2cf5-695g/GHSA-jrvp-2cf5-695g.json
new file mode 100644
index 00000000000..d0f9e3e4e48
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-jrvp-2cf5-695g/GHSA-jrvp-2cf5-695g.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jrvp-2cf5-695g",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-9608"
+  ],
+  "details": "The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.24.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Please note this is only exploitable when the WooCommerce store is set to Belgium.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9608"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3206928/woocommerce-myparcel/tags/4.24.2/includes/admin/settings/class-wcmypa-settings.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d6c85f2b-965d-477f-9d9a-4a3f315c4904?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T12:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-pmp6-xcw2-wmp6/GHSA-pmp6-xcw2-wmp6.json b/advisories/unreviewed/2024/12/GHSA-pmp6-xcw2-wmp6/GHSA-pmp6-xcw2-wmp6.json
new file mode 100644
index 00000000000..8b55636a02a
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-pmp6-xcw2-wmp6/GHSA-pmp6-xcw2-wmp6.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pmp6-xcw2-wmp6",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-21576"
+  ],
+  "details": "ComfyUI-Bmad-Nodes is vulnerable to Code Injection. The issue stems from a validation bypass in the BuildColorRangeHSVAdvanced, FilterContour and FindContour custom nodes. In the entrypoint function to each node, there’s a call to eval which can be triggered by generating a workflow that injects a crafted string into the node. This can result in executing arbitrary code on the server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21576"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bmad4ever/comfyui_bmad_nodes/blob/392af9490cbadf32a1fe92ff820ebabe88c51ee8/cv_nodes.py#L1814"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T12:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-qrwv-895c-pv4v/GHSA-qrwv-895c-pv4v.json b/advisories/unreviewed/2024/12/GHSA-qrwv-895c-pv4v/GHSA-qrwv-895c-pv4v.json
new file mode 100644
index 00000000000..8cbb5dd5478
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-qrwv-895c-pv4v/GHSA-qrwv-895c-pv4v.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qrwv-895c-pv4v",
+  "modified": "2024-12-13T12:31:46Z",
+  "published": "2024-12-13T12:31:46Z",
+  "aliases": [
+    "CVE-2024-10783"
+  ],
+  "details": "The MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites plugin for WordPress is vulnerable to privilege escalation due to a missing authorization checks on the register_site function in all versions up to, and including, 5.2 when a site is left in an unconfigured state. This makes it possible for unauthenticated attackers to log in as an administrator on instances where MainWP Child is not yet connected to the MainWP Dashboard. IMPORTANT: this only affects sites who have MainWP Child installed and have not yet connected to the MainWP Dashboard, and do not have the unique security ID feature enabled. Sites already connected to the MainWP Dashboard plugin and do not have the unique security ID feature enabled, are NOT affected and not required to upgrade. Please note 5.2.1 contains a partial patch, though we consider 5.3 to be the complete patch.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10783"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/mainwp-child/tags/5.2/class/class-mainwp-child.php#L76"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/mainwp-child/tags/5.2/class/class-mainwp-connect.php#L69"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/mainwp-child/tags/5.2/class/class-mainwp-connect.php#L788"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3197586%40mainwp-child&new=3197586%40mainwp-child&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/mainwp-child"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9156e536-a58e-4d78-b136-af8a9613ee23?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T10:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-r83p-g228-gq84/GHSA-r83p-g228-gq84.json b/advisories/unreviewed/2024/12/GHSA-r83p-g228-gq84/GHSA-r83p-g228-gq84.json
new file mode 100644
index 00000000000..579f9b22018
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-r83p-g228-gq84/GHSA-r83p-g228-gq84.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r83p-g228-gq84",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52064"
+  ],
+  "details": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52064"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52064"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-rjx4-8gxj-w5gj/GHSA-rjx4-8gxj-w5gj.json b/advisories/unreviewed/2024/12/GHSA-rjx4-8gxj-w5gj/GHSA-rjx4-8gxj-w5gj.json
new file mode 100644
index 00000000000..71625d64f1c
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-rjx4-8gxj-w5gj/GHSA-rjx4-8gxj-w5gj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rjx4-8gxj-w5gj",
+  "modified": "2024-12-13T12:31:49Z",
+  "published": "2024-12-13T12:31:49Z",
+  "aliases": [
+    "CVE-2024-21577"
+  ],
+  "details": "ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACE_ExpressionEval node contains an eval() in its entrypoint function that accepts arbitrary user-controlled data. A user can create a workflow that results in executing arbitrary code on the server.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21577"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/hay86/ComfyUI_AceNodes/blob/5ba01db8a3b7afb8e4aecfaa48823ddeb132bbbb/nodes.py#L1193"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T12:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-v6wv-qmhq-j5mp/GHSA-v6wv-qmhq-j5mp.json b/advisories/unreviewed/2024/12/GHSA-v6wv-qmhq-j5mp/GHSA-v6wv-qmhq-j5mp.json
new file mode 100644
index 00000000000..3cca60b75d3
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-v6wv-qmhq-j5mp/GHSA-v6wv-qmhq-j5mp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v6wv-qmhq-j5mp",
+  "modified": "2024-12-13T12:31:48Z",
+  "published": "2024-12-13T12:31:48Z",
+  "aliases": [
+    "CVE-2024-52058"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.19.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52058"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rti.com/vulnerabilities/#cve-2024-52058"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-78"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T11:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-w38j-p59r-qv5r/GHSA-w38j-p59r-qv5r.json b/advisories/unreviewed/2024/12/GHSA-w38j-p59r-qv5r/GHSA-w38j-p59r-qv5r.json
new file mode 100644
index 00000000000..16c170bd19b
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-w38j-p59r-qv5r/GHSA-w38j-p59r-qv5r.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w38j-p59r-qv5r",
+  "modified": "2024-12-13T12:31:47Z",
+  "published": "2024-12-13T12:31:47Z",
+  "aliases": [
+    "CVE-2024-9290"
+  ],
+  "details": "The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9290"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codecanyon.net/item/super-backup-clone-migrate-for-wordpress/12943030"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7c31d9b3-38b1-49a1-b361-ffe97e02bff0?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-13T10:15:07Z"
+  }
+}
\ No newline at end of file