diff --git a/advisories/unreviewed/2024/04/GHSA-24wc-7r9r-xg28/GHSA-24wc-7r9r-xg28.json b/advisories/unreviewed/2024/04/GHSA-24wc-7r9r-xg28/GHSA-24wc-7r9r-xg28.json
new file mode 100644
index 00000000000..e7238b02820
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-24wc-7r9r-xg28/GHSA-24wc-7r9r-xg28.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-24wc-7r9r-xg28",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27988"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Responsive Columns allows Stored XSS.This issue affects WEN Responsive Columns: from n/a through 1.3.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27988"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wen-responsive-columns/wordpress-wen-responsive-columns-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-2p46-76mg-wxvh/GHSA-2p46-76mg-wxvh.json b/advisories/unreviewed/2024/04/GHSA-2p46-76mg-wxvh/GHSA-2p46-76mg-wxvh.json
new file mode 100644
index 00000000000..f7dec464258
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-2p46-76mg-wxvh/GHSA-2p46-76mg-wxvh.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2p46-76mg-wxvh",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-2740"
+  ],
+  "details": "Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to access some administrative resources due to lack of proper management of the Switch web interface.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2740"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-planet-igs-4215-16t2s"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-2qhf-4crg-6c2w/GHSA-2qhf-4crg-6c2w.json b/advisories/unreviewed/2024/04/GHSA-2qhf-4crg-6c2w/GHSA-2qhf-4crg-6c2w.json
new file mode 100644
index 00000000000..ca99f11ed68
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-2qhf-4crg-6c2w/GHSA-2qhf-4crg-6c2w.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qhf-4crg-6c2w",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27683"
+  ],
+  "details": "D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27683"
+    },
+    {
+      "type": "WEB",
+      "url": "https://drive.google.com/file/d/18RhbBnaD_kH16Y6C-7TpSSPUmYKKyU_k/view"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/sunwithmoon/428c3871482a600382fec0a1994a518b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dlink.com/en/security-bulletin"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-375h-xc5m-fwff/GHSA-375h-xc5m-fwff.json b/advisories/unreviewed/2024/04/GHSA-375h-xc5m-fwff/GHSA-375h-xc5m-fwff.json
new file mode 100644
index 00000000000..a5ab0d4b2ed
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-375h-xc5m-fwff/GHSA-375h-xc5m-fwff.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-375h-xc5m-fwff",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2023-27607"
+  ],
+  "details": "Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27607"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/points-and-rewards-for-woocommerce/wordpress-points-and-rewards-for-woocommerce-plugin-1-5-0-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:19:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-395v-96gv-76w3/GHSA-395v-96gv-76w3.json b/advisories/unreviewed/2024/04/GHSA-395v-96gv-76w3/GHSA-395v-96gv-76w3.json
new file mode 100644
index 00000000000..2c9a2dd1f06
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-395v-96gv-76w3/GHSA-395v-96gv-76w3.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-395v-96gv-76w3",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3652"
+  ],
+  "details": "The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3652"
+    },
+    {
+      "type": "WEB",
+      "url": "https://libreswan.org/security/CVE-2024-3652"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-3m48-2pc8-qvj4/GHSA-3m48-2pc8-qvj4.json b/advisories/unreviewed/2024/04/GHSA-3m48-2pc8-qvj4/GHSA-3m48-2pc8-qvj4.json
new file mode 100644
index 00000000000..cfca84b0fab
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-3m48-2pc8-qvj4/GHSA-3m48-2pc8-qvj4.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3m48-2pc8-qvj4",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-29452"
+  ],
+  "details": "An insecure deserialization vulnerability has been identified in ROS2 Humble Hawksbill in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows attackers to execute arbitrary code and obtain sensitive information via crafted input to the Data Serialization and Deserialization Components, Inter-Process Communication Mechanisms, and Network Communication Interfaces.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29452"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/yashpatelphd/CVE-2024-29452"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:46Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-3qww-7h3r-885f/GHSA-3qww-7h3r-885f.json b/advisories/unreviewed/2024/04/GHSA-3qww-7h3r-885f/GHSA-3qww-7h3r-885f.json
new file mode 100644
index 00000000000..39b75c1855d
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-3qww-7h3r-885f/GHSA-3qww-7h3r-885f.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3qww-7h3r-885f",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3614"
+  ],
+  "details": "A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260271.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3614"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS3.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260271"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260271"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312703"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:46Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-3r99-xrvw-9qc4/GHSA-3r99-xrvw-9qc4.json b/advisories/unreviewed/2024/04/GHSA-3r99-xrvw-9qc4/GHSA-3r99-xrvw-9qc4.json
new file mode 100644
index 00000000000..b91a29a4559
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-3r99-xrvw-9qc4/GHSA-3r99-xrvw-9qc4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3r99-xrvw-9qc4",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-24850"
+  ],
+  "details": "Missing Authorization vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24850"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:53Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-3v93-8v25-3jqc/GHSA-3v93-8v25-3jqc.json b/advisories/unreviewed/2024/04/GHSA-3v93-8v25-3jqc/GHSA-3v93-8v25-3jqc.json
new file mode 100644
index 00000000000..89cf809da0c
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-3v93-8v25-3jqc/GHSA-3v93-8v25-3jqc.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3v93-8v25-3jqc",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3619"
+  ],
+  "details": "A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /control/addcase_stage.php. The manipulation of the argument cname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260275.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3619"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/zyairelai/CVE-submissions/blob/main/kortex-addcase_stage-sqli.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260275"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260275"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312813"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-43gg-m8j9-xmqj/GHSA-43gg-m8j9-xmqj.json b/advisories/unreviewed/2024/04/GHSA-43gg-m8j9-xmqj/GHSA-43gg-m8j9-xmqj.json
new file mode 100644
index 00000000000..a53889d5094
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-43gg-m8j9-xmqj/GHSA-43gg-m8j9-xmqj.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-43gg-m8j9-xmqj",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3618"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file /control/activate_case.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-260274 is the identifier assigned to this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3618"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/zyairelai/CVE-submissions/blob/main/kortex-activate_case-sqli.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260274"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260274"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312807"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-4h42-x6j9-68pv/GHSA-4h42-x6j9-68pv.json b/advisories/unreviewed/2024/04/GHSA-4h42-x6j9-68pv/GHSA-4h42-x6j9-68pv.json
new file mode 100644
index 00000000000..c5e83bf60d7
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-4h42-x6j9-68pv/GHSA-4h42-x6j9-68pv.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4h42-x6j9-68pv",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-25935"
+  ],
+  "details": "Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25935"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-plugin-5-2-5-9-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:58Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-6x99-c49x-8x6w/GHSA-6x99-c49x-8x6w.json b/advisories/unreviewed/2024/04/GHSA-6x99-c49x-8x6w/GHSA-6x99-c49x-8x6w.json
new file mode 100644
index 00000000000..58748021284
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-6x99-c49x-8x6w/GHSA-6x99-c49x-8x6w.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6x99-c49x-8x6w",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27966"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 8.2.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27966"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-72h6-54fg-6qph/GHSA-72h6-54fg-6qph.json b/advisories/unreviewed/2024/04/GHSA-72h6-54fg-6qph/GHSA-72h6-54fg-6qph.json
new file mode 100644
index 00000000000..5db2cdbdc39
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-72h6-54fg-6qph/GHSA-72h6-54fg-6qph.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-72h6-54fg-6qph",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-29220"
+  ],
+  "details": "Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN50361500"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ninjaforms.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/ninja-forms"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-7vmh-44jh-j67q/GHSA-7vmh-44jh-j67q.json b/advisories/unreviewed/2024/04/GHSA-7vmh-44jh-j67q/GHSA-7vmh-44jh-j67q.json
new file mode 100644
index 00000000000..03ae6251675
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-7vmh-44jh-j67q/GHSA-7vmh-44jh-j67q.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7vmh-44jh-j67q",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3620"
+  ],
+  "details": "A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /control/adds.php. The manipulation of the argument name/gender/dob/email/mobile/address leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260276.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3620"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/zyairelai/CVE-submissions/blob/main/kortex-adds-sqli.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260276"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260276"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312815"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-8r8w-555p-94hh/GHSA-8r8w-555p-94hh.json b/advisories/unreviewed/2024/04/GHSA-8r8w-555p-94hh/GHSA-8r8w-555p-94hh.json
new file mode 100644
index 00000000000..da0201fbeac
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-8r8w-555p-94hh/GHSA-8r8w-555p-94hh.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8r8w-555p-94hh",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2022-47604"
+  ],
+  "details": "Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47604"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/ajax-thumbnail-rebuild/wordpress-ajax-thumbnail-rebuild-plugin-1-13-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:17:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-95g8-gqrv-f83g/GHSA-95g8-gqrv-f83g.json b/advisories/unreviewed/2024/04/GHSA-95g8-gqrv-f83g/GHSA-95g8-gqrv-f83g.json
new file mode 100644
index 00000000000..e994774e769
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-95g8-gqrv-f83g/GHSA-95g8-gqrv-f83g.json
@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-95g8-gqrv-f83g",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-29937"
+  ],
+  "details": "NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29937"
+    },
+    {
+      "type": "WEB",
+      "url": "https://news.ycombinator.com/item?id=39778203"
+    },
+    {
+      "type": "WEB",
+      "url": "https://t2.fi/schedule/2024"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.signedness.org/t2.fi.2024"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.youtube.com/watch?v=i_JOkHaCdzk"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-985w-rjcv-fvwq/GHSA-985w-rjcv-fvwq.json b/advisories/unreviewed/2024/04/GHSA-985w-rjcv-fvwq/GHSA-985w-rjcv-fvwq.json
new file mode 100644
index 00000000000..4b8d60fd848
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-985w-rjcv-fvwq/GHSA-985w-rjcv-fvwq.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-985w-rjcv-fvwq",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-2742"
+  ],
+  "details": "Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attacker could execute arbitrary code on the remote host by exploiting IP address functionality.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2742"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-planet-igs-4215-16t2s"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-78"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-9jm5-85j2-p9f4/GHSA-9jm5-85j2-p9f4.json b/advisories/unreviewed/2024/04/GHSA-9jm5-85j2-p9f4/GHSA-9jm5-85j2-p9f4.json
new file mode 100644
index 00000000000..2865869fad5
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-9jm5-85j2-p9f4/GHSA-9jm5-85j2-p9f4.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9jm5-85j2-p9f4",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2023-51141"
+  ],
+  "details": "An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51141"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/ipxsec/1680d29c49fe368be81b037168175b10"
+    },
+    {
+      "type": "WEB",
+      "url": "http://biotime.com"
+    },
+    {
+      "type": "WEB",
+      "url": "http://zkteko.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:22:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-ccp6-9qrc-rc5f/GHSA-ccp6-9qrc-rc5f.json b/advisories/unreviewed/2024/04/GHSA-ccp6-9qrc-rc5f/GHSA-ccp6-9qrc-rc5f.json
new file mode 100644
index 00000000000..77a72b427ca
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-ccp6-9qrc-rc5f/GHSA-ccp6-9qrc-rc5f.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ccp6-9qrc-rc5f",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-2741"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or updating accounts through the Switch web interface.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2741"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-planet-igs-4215-16t2s"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-cq3g-rm8m-r7p8/GHSA-cq3g-rm8m-r7p8.json b/advisories/unreviewed/2024/04/GHSA-cq3g-rm8m-r7p8/GHSA-cq3g-rm8m-r7p8.json
new file mode 100644
index 00000000000..728189ba12e
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-cq3g-rm8m-r7p8/GHSA-cq3g-rm8m-r7p8.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cq3g-rm8m-r7p8",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3617"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some unknown processing of the file /control/deactivate_case.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260273 was assigned to this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3617"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/zyairelai/CVE-submissions/blob/main/kortex-deactivate_case-sqli.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260273"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260273"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312804"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-cw7c-qp78-f826/GHSA-cw7c-qp78-f826.json b/advisories/unreviewed/2024/04/GHSA-cw7c-qp78-f826/GHSA-cw7c-qp78-f826.json
new file mode 100644
index 00000000000..620546c918b
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-cw7c-qp78-f826/GHSA-cw7c-qp78-f826.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cw7c-qp78-f826",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-27991"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SupportCandy allows Stored XSS.This issue affects SupportCandy: from n/a through 3.2.3.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27991"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/supportcandy/wordpress-supportcandy-plugin-3-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-fm53-2cx3-crw3/GHSA-fm53-2cx3-crw3.json b/advisories/unreviewed/2024/04/GHSA-fm53-2cx3-crw3/GHSA-fm53-2cx3-crw3.json
new file mode 100644
index 00000000000..07c69f64fe1
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-fm53-2cx3-crw3/GHSA-fm53-2cx3-crw3.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fm53-2cx3-crw3",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2023-51142"
+  ],
+  "details": "An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51142"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/ipxsec/b20383620c9e1d5300f7716e62e8a82f"
+    },
+    {
+      "type": "WEB",
+      "url": "http://biotime.com"
+    },
+    {
+      "type": "WEB",
+      "url": "http://zkteco.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:22:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-g425-q4hx-3qh2/GHSA-g425-q4hx-3qh2.json b/advisories/unreviewed/2024/04/GHSA-g425-q4hx-3qh2/GHSA-g425-q4hx-3qh2.json
new file mode 100644
index 00000000000..9a565f58a6f
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-g425-q4hx-3qh2/GHSA-g425-q4hx-3qh2.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g425-q4hx-3qh2",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-24883"
+  ],
+  "details": "Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24883"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/bdthemes-prime-slider-lite/wordpress-prime-slider-plugin-3-11-10-broken-access-control-on-duplicate-post-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:53Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-gr5p-p7qh-pg49/GHSA-gr5p-p7qh-pg49.json b/advisories/unreviewed/2024/04/GHSA-gr5p-p7qh-pg49/GHSA-gr5p-p7qh-pg49.json
new file mode 100644
index 00000000000..899272d993a
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-gr5p-p7qh-pg49/GHSA-gr5p-p7qh-pg49.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gr5p-p7qh-pg49",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2023-51672"
+  ],
+  "details": "Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51672"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/woofunnels-aero-checkout/wordpress-funnelkit-checkout-plugin-3-10-3-unauthenticated-arbitrary-post-page-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:22:45Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-h53p-rqw3-mjw4/GHSA-h53p-rqw3-mjw4.json b/advisories/unreviewed/2024/04/GHSA-h53p-rqw3-mjw4/GHSA-h53p-rqw3-mjw4.json
new file mode 100644
index 00000000000..9b5f65f68d3
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-h53p-rqw3-mjw4/GHSA-h53p-rqw3-mjw4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h53p-rqw3-mjw4",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-27990"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Moneytizer allows Stored XSS.This issue affects The Moneytizer: from n/a through 9.5.20.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27990"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/the-moneytizer/wordpress-the-moneytizer-plugin-9-5-20-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-h7gg-c33j-63rm/GHSA-h7gg-c33j-63rm.json b/advisories/unreviewed/2024/04/GHSA-h7gg-c33j-63rm/GHSA-h7gg-c33j-63rm.json
new file mode 100644
index 00000000000..4e7aba713ac
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-h7gg-c33j-63rm/GHSA-h7gg-c33j-63rm.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h7gg-c33j-63rm",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-27992"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper Link Whisper Free allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.6.8.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27992"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/link-whisper/wordpress-link-whisper-free-plugin-0-6-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-hgfp-7jv2-5g7v/GHSA-hgfp-7jv2-5g7v.json b/advisories/unreviewed/2024/04/GHSA-hgfp-7jv2-5g7v/GHSA-hgfp-7jv2-5g7v.json
new file mode 100644
index 00000000000..278f35df874
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-hgfp-7jv2-5g7v/GHSA-hgfp-7jv2-5g7v.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hgfp-7jv2-5g7v",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-3616"
+  ],
+  "details": "A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0. This vulnerability affects unknown code of the file pengguna.php. The manipulation of the argument admin_user/admin_nama/admin_alamat/admin_telepon leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260272.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3616"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS4.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.260272"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.260272"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.312704"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-hr5p-mh26-ppww/GHSA-hr5p-mh26-ppww.json b/advisories/unreviewed/2024/04/GHSA-hr5p-mh26-ppww/GHSA-hr5p-mh26-ppww.json
new file mode 100644
index 00000000000..245fef4a5f9
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-hr5p-mh26-ppww/GHSA-hr5p-mh26-ppww.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hr5p-mh26-ppww",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27969"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Enhanced Free Downloads WooCommerce allows Stored XSS.This issue affects Free Downloads WooCommerce: from n/a through 3.5.8.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27969"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/download-now-for-woocommerce/wordpress-free-downloads-woocommerce-plugin-3-5-8-2-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-j66j-8jmr-p8r5/GHSA-j66j-8jmr-p8r5.json b/advisories/unreviewed/2024/04/GHSA-j66j-8jmr-p8r5/GHSA-j66j-8jmr-p8r5.json
new file mode 100644
index 00000000000..2a1ebc1e105
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-j66j-8jmr-p8r5/GHSA-j66j-8jmr-p8r5.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j66j-8jmr-p8r5",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-25907"
+  ],
+  "details": "Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-media-folder/wordpress-wp-media-folder-plugin-5-7-2-plugin-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:57Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-jc9g-p879-f3v9/GHSA-jc9g-p879-f3v9.json b/advisories/unreviewed/2024/04/GHSA-jc9g-p879-f3v9/GHSA-jc9g-p879-f3v9.json
new file mode 100644
index 00000000000..9b09e0f830b
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-jc9g-p879-f3v9/GHSA-jc9g-p879-f3v9.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jc9g-p879-f3v9",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-25922"
+  ],
+  "details": "Missing Authorization vulnerability in Peach Payments Peach Payments Gateway.This issue affects Peach Payments Gateway: from n/a through 3.1.9.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25922"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wc-peach-payments-gateway/wordpress-peach-payments-gateway-plugin-3-1-9-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:57Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-jjqv-cpg4-vp45/GHSA-jjqv-cpg4-vp45.json b/advisories/unreviewed/2024/04/GHSA-jjqv-cpg4-vp45/GHSA-jjqv-cpg4-vp45.json
new file mode 100644
index 00000000000..5d19afede1a
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-jjqv-cpg4-vp45/GHSA-jjqv-cpg4-vp45.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jjqv-cpg4-vp45",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27985"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.9.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27985"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/propertyhive/wordpress-propertyhive-plugin-2-0-9-php-object-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-m5xc-cx57-jcg8/GHSA-m5xc-cx57-jcg8.json b/advisories/unreviewed/2024/04/GHSA-m5xc-cx57-jcg8/GHSA-m5xc-cx57-jcg8.json
new file mode 100644
index 00000000000..10e1b0874ec
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-m5xc-cx57-jcg8/GHSA-m5xc-cx57-jcg8.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m5xc-cx57-jcg8",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2022-44633"
+  ],
+  "details": "Missing Authorization vulnerability in YITH YITH WooCommerce Gift Cards Premium.This issue affects YITH WooCommerce Gift Cards Premium: from n/a through 3.23.1.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44633"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-23-1-unauth-gift-card-creation-leading-to-stored-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:17:02Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-p5g2-89mm-prg6/GHSA-p5g2-89mm-prg6.json b/advisories/unreviewed/2024/04/GHSA-p5g2-89mm-prg6/GHSA-p5g2-89mm-prg6.json
new file mode 100644
index 00000000000..966378b04cb
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-p5g2-89mm-prg6/GHSA-p5g2-89mm-prg6.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p5g2-89mm-prg6",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-26019"
+  ],
+  "details": "Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26019"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN50361500"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ninjaforms.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/ninja-forms"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-p777-v2c9-7gxq/GHSA-p777-v2c9-7gxq.json b/advisories/unreviewed/2024/04/GHSA-p777-v2c9-7gxq/GHSA-p777-v2c9-7gxq.json
new file mode 100644
index 00000000000..1e6e431a20b
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-p777-v2c9-7gxq/GHSA-p777-v2c9-7gxq.json
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p777-v2c9-7gxq",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-25572"
+  ],
+  "details": "Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25572"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN50361500"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ninjaforms.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/ninja-forms"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T03:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-pfvj-h8r5-43h5/GHSA-pfvj-h8r5-43h5.json b/advisories/unreviewed/2024/04/GHSA-pfvj-h8r5-43h5/GHSA-pfvj-h8r5-43h5.json
new file mode 100644
index 00000000000..3af9dbb1820
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-pfvj-h8r5-43h5/GHSA-pfvj-h8r5-43h5.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pfvj-h8r5-43h5",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27967"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Michael Leithold DSGVO All in one for WP.This issue affects DSGVO All in one for WP: from n/a through 4.3.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27967"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/dsgvo-all-in-one-for-wp/wordpress-dsgvo-all-in-one-for-wp-plugin-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-ph6v-3w8w-6p8m/GHSA-ph6v-3w8w-6p8m.json b/advisories/unreviewed/2024/04/GHSA-ph6v-3w8w-6p8m/GHSA-ph6v-3w8w-6p8m.json
new file mode 100644
index 00000000000..bf488de6e20
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-ph6v-3w8w-6p8m/GHSA-ph6v-3w8w-6p8m.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ph6v-3w8w-6p8m",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-25908"
+  ],
+  "details": "Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25908"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-media-folder/wordpress-wp-media-folder-plugin-5-7-2-subscriber-arbitrary-post-page-modification-title-excerpt-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:57Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-qg75-vrpw-cgq6/GHSA-qg75-vrpw-cgq6.json b/advisories/unreviewed/2024/04/GHSA-qg75-vrpw-cgq6/GHSA-qg75-vrpw-cgq6.json
new file mode 100644
index 00000000000..58b07b1602e
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-qg75-vrpw-cgq6/GHSA-qg75-vrpw-cgq6.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qg75-vrpw-cgq6",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2023-6811"
+  ],
+  "details": "The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key’ parameter in all versions up to, and including, 223 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6811"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3067865%40conveythis-translate%2Ftrunk&old=3062168%40conveythis-translate%2Ftrunk&sfp_email=&sfph_mail=#file5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/093af92e-bbc2-463a-8547-0e48fb356655?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T02:15:46Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-r8gf-vrx9-6qwc/GHSA-r8gf-vrx9-6qwc.json b/advisories/unreviewed/2024/04/GHSA-r8gf-vrx9-6qwc/GHSA-r8gf-vrx9-6qwc.json
new file mode 100644
index 00000000000..9349532bcca
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-r8gf-vrx9-6qwc/GHSA-r8gf-vrx9-6qwc.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r8gf-vrx9-6qwc",
+  "modified": "2024-04-11T03:34:59Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-25912"
+  ],
+  "details": "Missing Authorization vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25912"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/moveto/wordpress-moveto-plugin-6-2-unauthenticated-arbitrary-wordpress-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:24:57Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-v8v6-822x-pf6w/GHSA-v8v6-822x-pf6w.json b/advisories/unreviewed/2024/04/GHSA-v8v6-822x-pf6w/GHSA-v8v6-822x-pf6w.json
new file mode 100644
index 00000000000..f9f1ec88d3a
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-v8v6-822x-pf6w/GHSA-v8v6-822x-pf6w.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v8v6-822x-pf6w",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-27970"
+  ],
+  "details": "Missing Authorization vulnerability in BogdanFix WP SendFox.This issue affects WP SendFox: from n/a through 1.3.0.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27970"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-sendfox/wordpress-wp-sendfox-plugin-1-3-0-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-x5qq-mm82-fv4j/GHSA-x5qq-mm82-fv4j.json b/advisories/unreviewed/2024/04/GHSA-x5qq-mm82-fv4j/GHSA-x5qq-mm82-fv4j.json
new file mode 100644
index 00000000000..31bd4336823
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-x5qq-mm82-fv4j/GHSA-x5qq-mm82-fv4j.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x5qq-mm82-fv4j",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:35:00Z",
+  "aliases": [
+    "CVE-2024-28402"
+  ],
+  "details": "TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28402"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_4_IP_Port_Filtering/XSS.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/04/GHSA-xxvg-9x33-93vm/GHSA-xxvg-9x33-93vm.json b/advisories/unreviewed/2024/04/GHSA-xxvg-9x33-93vm/GHSA-xxvg-9x33-93vm.json
new file mode 100644
index 00000000000..caf6183c7ec
--- /dev/null
+++ b/advisories/unreviewed/2024/04/GHSA-xxvg-9x33-93vm/GHSA-xxvg-9x33-93vm.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xxvg-9x33-93vm",
+  "modified": "2024-04-11T03:35:00Z",
+  "published": "2024-04-11T03:34:59Z",
+  "aliases": [
+    "CVE-2024-27989"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs allows Stored XSS.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27989"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/responsive-horizontal-vertical-and-accordion-tabs/wordpress-wp-responsive-tabs-horizontal-vertical-and-accordion-tabs-plugin-1-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-11T01:25:07Z"
+  }
+}
\ No newline at end of file