From b0c2057c9c014d806d7326245759ded0cc4b7568 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 20 Feb 2025 09:33:09 +0000 Subject: [PATCH] Publish Advisories GHSA-56h9-pghv-8mp7 GHSA-jj4m-28mq-gpjr GHSA-qf3h-q4g6-359h GHSA-w56m-wcpr-36rf --- .../GHSA-56h9-pghv-8mp7.json | 44 +++++++++++++++++ .../GHSA-jj4m-28mq-gpjr.json | 40 ++++++++++++++++ .../GHSA-qf3h-q4g6-359h.json | 44 +++++++++++++++++ .../GHSA-w56m-wcpr-36rf.json | 48 +++++++++++++++++++ 4 files changed, 176 insertions(+) create mode 100644 advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json create mode 100644 advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json create mode 100644 advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json create mode 100644 advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json diff --git a/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json b/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json new file mode 100644 index 00000000000..f1d926f7996 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-56h9-pghv-8mp7", + "modified": "2025-02-20T09:31:36Z", + "published": "2025-02-20T09:31:36Z", + "aliases": [ + "CVE-2024-13888" + ], + "details": "The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13888" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3243366" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/wpappninja/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a139f0fc-f3e0-4759-aa8d-ba138e5ccc87?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-20T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json b/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json new file mode 100644 index 00000000000..9a960d9f844 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jj4m-28mq-gpjr", + "modified": "2025-02-20T09:31:36Z", + "published": "2025-02-20T09:31:36Z", + "aliases": [ + "CVE-2025-1064" + ], + "details": "The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up to, and including, 2.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1064" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3239293/easy-login-woocommerce" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dd62a072-8619-4f51-a52f-2ada7e455cb1?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-20T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json b/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json new file mode 100644 index 00000000000..9df70642f9e --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qf3h-q4g6-359h", + "modified": "2025-02-20T09:31:35Z", + "published": "2025-02-20T09:31:35Z", + "aliases": [ + "CVE-2024-13155" + ], + "details": "The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: Since the widget code isn't part of the code base, to apply the patch, the affected widget: Transparent Split Hero must be deleted and reinstalled manually.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13155" + }, + { + "type": "WEB", + "url": "https://unlimited-elements.com/change-log" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/unlimited-elements-for-elementor/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/63ba4880-9fbb-42e3-a8db-8115eb832b13?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-20T08:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json b/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json new file mode 100644 index 00000000000..7b5069e4e12 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w56m-wcpr-36rf", + "modified": "2025-02-20T09:31:36Z", + "published": "2025-02-20T09:31:36Z", + "aliases": [ + "CVE-2025-0897" + ], + "details": "The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0897" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/modal-window/trunk/public/class-shortcodes.php#L70" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3243077" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/modal-window/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/de4dfcc7-fcc0-46e5-8452-98783007368d?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-20T09:15:09Z" + } +} \ No newline at end of file