diff --git a/advisories/unreviewed/2024/02/GHSA-3q83-x89h-m869/GHSA-3q83-x89h-m869.json b/advisories/unreviewed/2024/02/GHSA-3q83-x89h-m869/GHSA-3q83-x89h-m869.json
index c70884969bf..096162eb9ec 100644
--- a/advisories/unreviewed/2024/02/GHSA-3q83-x89h-m869/GHSA-3q83-x89h-m869.json
+++ b/advisories/unreviewed/2024/02/GHSA-3q83-x89h-m869/GHSA-3q83-x89h-m869.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3q83-x89h-m869",
-  "modified": "2024-02-22T15:30:39Z",
+  "modified": "2024-12-31T15:30:44Z",
   "published": "2024-02-22T15:30:39Z",
   "aliases": [
     "CVE-2024-26284"
   ],
   "details": "Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker's website. This vulnerability affects Focus for iOS < 123.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-22T15:15:08Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json b/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json
index 30cc100a1b7..04598349ec5 100644
--- a/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json
+++ b/advisories/unreviewed/2024/02/GHSA-vx8g-76pm-2x2x/GHSA-vx8g-76pm-2x2x.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-78",
       "CWE-94"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/12/GHSA-2jp3-2vfh-535w/GHSA-2jp3-2vfh-535w.json b/advisories/unreviewed/2024/12/GHSA-2jp3-2vfh-535w/GHSA-2jp3-2vfh-535w.json
new file mode 100644
index 00000000000..120a100b2fc
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-2jp3-2vfh-535w/GHSA-2jp3-2vfh-535w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2jp3-2vfh-535w",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56043"
+  ],
+  "details": "Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS allows Privilege Escalation.This issue affects WPLMS: from n/a through 1.9.9.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56043"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-unauthenticated-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-33cj-qgm7-jr34/GHSA-33cj-qgm7-jr34.json b/advisories/unreviewed/2024/12/GHSA-33cj-qgm7-jr34/GHSA-33cj-qgm7-jr34.json
new file mode 100644
index 00000000000..509beb9df04
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-33cj-qgm7-jr34/GHSA-33cj-qgm7-jr34.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33cj-qgm7-jr34",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56070"
+  ],
+  "details": "Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through 2.3.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56070"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-multiple-subscriber-broken-access-control-vulnerabilities?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-3534-qh3w-xf65/GHSA-3534-qh3w-xf65.json b/advisories/unreviewed/2024/12/GHSA-3534-qh3w-xf65/GHSA-3534-qh3w-xf65.json
new file mode 100644
index 00000000000..d731ebd7d2d
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-3534-qh3w-xf65/GHSA-3534-qh3w-xf65.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3534-qh3w-xf65",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-56207"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through 3.4.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56207"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/editionguard-for-woocommerce-ebook-sales-with-drm/vulnerability/wordpress-editionguard-for-woocommerce-ebook-sales-with-drm-plugin-3-4-2-csrf-to-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-355x-frhv-pxh6/GHSA-355x-frhv-pxh6.json b/advisories/unreviewed/2024/12/GHSA-355x-frhv-pxh6/GHSA-355x-frhv-pxh6.json
new file mode 100644
index 00000000000..900bd574415
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-355x-frhv-pxh6/GHSA-355x-frhv-pxh6.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-355x-frhv-pxh6",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-13072"
+  ],
+  "details": "A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13072"
+    },
+    {
+      "type": "WEB",
+      "url": "https://1000projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/lings3346/CVE/blob/main/SQL_Injection_in_Beauty_Parlour_Management_System.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.289826"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.289826"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.472165"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T15:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-3749-62f5-h6xh/GHSA-3749-62f5-h6xh.json b/advisories/unreviewed/2024/12/GHSA-3749-62f5-h6xh/GHSA-3749-62f5-h6xh.json
new file mode 100644
index 00000000000..ef3a3f2e1e6
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-3749-62f5-h6xh/GHSA-3749-62f5-h6xh.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3749-62f5-h6xh",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-49686"
+  ],
+  "details": "Missing Authorization vulnerability in Fatcat Apps Landing Page Cat.This issue affects Landing Page Cat: from n/a through 1.7.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49686"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/landing-page-cat/vulnerability/wordpress-landing-page-cat-plugin-1-7-4-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-398c-f7w9-crc8/GHSA-398c-f7w9-crc8.json b/advisories/unreviewed/2024/12/GHSA-398c-f7w9-crc8/GHSA-398c-f7w9-crc8.json
new file mode 100644
index 00000000000..689f99d6ffc
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-398c-f7w9-crc8/GHSA-398c-f7w9-crc8.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-398c-f7w9-crc8",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2023-6602"
+  ],
+  "details": "A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6602"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2334338"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-99"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T15:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-3w66-m37p-v74f/GHSA-3w66-m37p-v74f.json b/advisories/unreviewed/2024/12/GHSA-3w66-m37p-v74f/GHSA-3w66-m37p-v74f.json
new file mode 100644
index 00000000000..3115302b2c1
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-3w66-m37p-v74f/GHSA-3w66-m37p-v74f.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3w66-m37p-v74f",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-55995"
+  ],
+  "details": "Missing Authorization vulnerability in Torod Holding LTD Torod allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Torod: from n/a through 1.7.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55995"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/torod/vulnerability/wordpress-torod-plugin-1-7-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-459f-f2j7-c7f4/GHSA-459f-f2j7-c7f4.json b/advisories/unreviewed/2024/12/GHSA-459f-f2j7-c7f4/GHSA-459f-f2j7-c7f4.json
new file mode 100644
index 00000000000..d72f1b9d171
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-459f-f2j7-c7f4/GHSA-459f-f2j7-c7f4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-459f-f2j7-c7f4",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56064"
+  ],
+  "details": "Unrestricted Upload of File with Dangerous Type vulnerability in Azzaroco WP SuperBackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through 2.3.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56064"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-4g88-vp7j-rp6x/GHSA-4g88-vp7j-rp6x.json b/advisories/unreviewed/2024/12/GHSA-4g88-vp7j-rp6x/GHSA-4g88-vp7j-rp6x.json
new file mode 100644
index 00000000000..0b3dfab88d8
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-4g88-vp7j-rp6x/GHSA-4g88-vp7j-rp6x.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4g88-vp7j-rp6x",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56046"
+  ],
+  "details": "Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56046"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-4q7h-c39w-2pw2/GHSA-4q7h-c39w-2pw2.json b/advisories/unreviewed/2024/12/GHSA-4q7h-c39w-2pw2/GHSA-4q7h-c39w-2pw2.json
new file mode 100644
index 00000000000..b6b7789eeb0
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-4q7h-c39w-2pw2/GHSA-4q7h-c39w-2pw2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4q7h-c39w-2pw2",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56061"
+  ],
+  "details": "Missing Authorization vulnerability in Webful Creations Computer Repair Shop allows Privilege Escalation.This issue affects Computer Repair Shop: from n/a through 3.8119.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56061"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8119-account-takeover-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-5436-hx9c-mx42/GHSA-5436-hx9c-mx42.json b/advisories/unreviewed/2024/12/GHSA-5436-hx9c-mx42/GHSA-5436-hx9c-mx42.json
new file mode 100644
index 00000000000..ee664debd5e
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-5436-hx9c-mx42/GHSA-5436-hx9c-mx42.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5436-hx9c-mx42",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56068"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Azzaroco WP SuperBackup.This issue affects WP SuperBackup: from n/a through 2.3.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56068"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-subscriber-php-object-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-6v36-w3qm-mcrj/GHSA-6v36-w3qm-mcrj.json b/advisories/unreviewed/2024/12/GHSA-6v36-w3qm-mcrj/GHSA-6v36-w3qm-mcrj.json
new file mode 100644
index 00000000000..52273c3d997
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-6v36-w3qm-mcrj/GHSA-6v36-w3qm-mcrj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6v36-w3qm-mcrj",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56066"
+  ],
+  "details": "Missing Authorization vulnerability in Inspry Agency Toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through 1.0.23.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56066"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/agency-toolkit/vulnerability/wordpress-agency-toolkit-plugin-1-0-23-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-6v3p-cvph-qq6c/GHSA-6v3p-cvph-qq6c.json b/advisories/unreviewed/2024/12/GHSA-6v3p-cvph-qq6c/GHSA-6v3p-cvph-qq6c.json
new file mode 100644
index 00000000000..684e6b6024a
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-6v3p-cvph-qq6c/GHSA-6v3p-cvph-qq6c.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6v3p-cvph-qq6c",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56067"
+  ],
+  "details": "Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through 2.3.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56067"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/indeed-wp-superbackup/vulnerability/wordpress-wp-superbackup-plugin-2-3-3-unauthenticated-backup-file-download-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-9mw4-c3fw-663h/GHSA-9mw4-c3fw-663h.json b/advisories/unreviewed/2024/12/GHSA-9mw4-c3fw-663h/GHSA-9mw4-c3fw-663h.json
new file mode 100644
index 00000000000..d5b3d16852f
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-9mw4-c3fw-663h/GHSA-9mw4-c3fw-663h.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9mw4-c3fw-663h",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2024-56041"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP allows SQL Injection.This issue affects VibeBP: from n/a before 1.9.9.5.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56041"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/vibebp/vulnerability/wordpress-vibebp-plugin-1-9-9-5-1-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-9qxh-qm2f-52h4/GHSA-9qxh-qm2f-52h4.json b/advisories/unreviewed/2024/12/GHSA-9qxh-qm2f-52h4/GHSA-9qxh-qm2f-52h4.json
new file mode 100644
index 00000000000..4d29bda13d4
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-9qxh-qm2f-52h4/GHSA-9qxh-qm2f-52h4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9qxh-qm2f-52h4",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2024-55991"
+  ],
+  "details": "Missing Authorization vulnerability in WP-CRM WP-CRM System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through 3.2.9.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55991"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wp-crm-system/vulnerability/wordpress-crm-plugin-wp-crm-system-plugin-3-2-9-1-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-c5fr-pjj5-9857/GHSA-c5fr-pjj5-9857.json b/advisories/unreviewed/2024/12/GHSA-c5fr-pjj5-9857/GHSA-c5fr-pjj5-9857.json
new file mode 100644
index 00000000000..99f091f65ea
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-c5fr-pjj5-9857/GHSA-c5fr-pjj5-9857.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c5fr-pjj5-9857",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56040"
+  ],
+  "details": "Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP allows Privilege Escalation.This issue affects VibeBP: from n/a through 1.9.9.4.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56040"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/vibebp/vulnerability/wordpress-vibebp-plugin-1-9-9-4-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-chj4-5w8w-6gg4/GHSA-chj4-5w8w-6gg4.json b/advisories/unreviewed/2024/12/GHSA-chj4-5w8w-6gg4/GHSA-chj4-5w8w-6gg4.json
new file mode 100644
index 00000000000..bbabf017782
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-chj4-5w8w-6gg4/GHSA-chj4-5w8w-6gg4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-chj4-5w8w-6gg4",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-49698"
+  ],
+  "details": "Missing Authorization vulnerability in PriceListo Best Restaurant Menu by PriceListo.This issue affects Best Restaurant Menu by PriceListo: from n/a through 1.4.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49698"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/best-restaurant-menu-by-pricelisto/vulnerability/wordpress-great-restaurant-menu-wp-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-cq22-f7mv-9c42/GHSA-cq22-f7mv-9c42.json b/advisories/unreviewed/2024/12/GHSA-cq22-f7mv-9c42/GHSA-cq22-f7mv-9c42.json
new file mode 100644
index 00000000000..6317d05793a
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-cq22-f7mv-9c42/GHSA-cq22-f7mv-9c42.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cq22-f7mv-9c42",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2023-48775"
+  ],
+  "details": "Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48775"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wp-cleanfix/vulnerability/wordpress-wp-cleanfix-plugin-5-5-0-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:05Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-cwhj-q4fp-695v/GHSA-cwhj-q4fp-695v.json b/advisories/unreviewed/2024/12/GHSA-cwhj-q4fp-695v/GHSA-cwhj-q4fp-695v.json
new file mode 100644
index 00000000000..c2a2b4e9746
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-cwhj-q4fp-695v/GHSA-cwhj-q4fp-695v.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cwhj-q4fp-695v",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56044"
+  ],
+  "details": "Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS allows Authentication Bypass.This issue affects WPLMS: from n/a through 1.9.9.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56044"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-unauthenticated-arbitrary-user-token-generation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-288"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-cxhm-m7wh-3qmw/GHSA-cxhm-m7wh-3qmw.json b/advisories/unreviewed/2024/12/GHSA-cxhm-m7wh-3qmw/GHSA-cxhm-m7wh-3qmw.json
new file mode 100644
index 00000000000..1375a8ecb39
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-cxhm-m7wh-3qmw/GHSA-cxhm-m7wh-3qmw.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cxhm-m7wh-3qmw",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56205"
+  ],
+  "details": "Incorrect Privilege Assignment vulnerability in AI Magic allows Privilege Escalation.This issue affects AI Magic: from n/a through 1.0.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/newsletter-page-redirects/vulnerability/wordpress-ai-magic-seo-content-generator-article-writer-plugin-1-0-4-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-f727-vjvm-gj23/GHSA-f727-vjvm-gj23.json b/advisories/unreviewed/2024/12/GHSA-f727-vjvm-gj23/GHSA-f727-vjvm-gj23.json
new file mode 100644
index 00000000000..84a70f3866e
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-f727-vjvm-gj23/GHSA-f727-vjvm-gj23.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f727-vjvm-gj23",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56203"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in George Holmes II Wayne Audio Player allows Privilege Escalation.This issue affects Wayne Audio Player: from n/a through 1.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56203"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wayne-audio-player/vulnerability/wordpress-wayne-audio-player-plugin-1-0-csrf-to-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-g6v9-2rv3-qx9w/GHSA-g6v9-2rv3-qx9w.json b/advisories/unreviewed/2024/12/GHSA-g6v9-2rv3-qx9w/GHSA-g6v9-2rv3-qx9w.json
new file mode 100644
index 00000000000..e4cb4b8d58a
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-g6v9-2rv3-qx9w/GHSA-g6v9-2rv3-qx9w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g6v9-2rv3-qx9w",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-49687"
+  ],
+  "details": "Missing Authorization vulnerability in StoreApps Smart Manager.This issue affects Smart Manager: from n/a through 8.45.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49687"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/smart-manager-for-wp-e-commerce/vulnerability/wordpress-smart-manager-plugin-8-45-0-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-g87j-6q2g-p686/GHSA-g87j-6q2g-p686.json b/advisories/unreviewed/2024/12/GHSA-g87j-6q2g-p686/GHSA-g87j-6q2g-p686.json
new file mode 100644
index 00000000000..e3818b45040
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-g87j-6q2g-p686/GHSA-g87j-6q2g-p686.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g87j-6q2g-p686",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2024-56031"
+  ],
+  "details": "Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through 1.0.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56031"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/smart-shopify-product/vulnerability/wordpress-smart-shopify-product-plugin-1-0-2-arbitrary-content-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-gxvx-w63c-jprw/GHSA-gxvx-w63c-jprw.json b/advisories/unreviewed/2024/12/GHSA-gxvx-w63c-jprw/GHSA-gxvx-w63c-jprw.json
new file mode 100644
index 00000000000..e0fcd2d026b
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-gxvx-w63c-jprw/GHSA-gxvx-w63c-jprw.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gxvx-w63c-jprw",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2023-6603"
+  ],
+  "details": "A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6603"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2334335"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-99"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-hph8-gjmm-52cq/GHSA-hph8-gjmm-52cq.json b/advisories/unreviewed/2024/12/GHSA-hph8-gjmm-52cq/GHSA-hph8-gjmm-52cq.json
new file mode 100644
index 00000000000..0e402ba42aa
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-hph8-gjmm-52cq/GHSA-hph8-gjmm-52cq.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hph8-gjmm-52cq",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-13070"
+  ],
+  "details": "A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/update_users.php of the component Update User Page. The manipulation of the argument user_upd leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13070"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codeastro.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/shaturo1337/POCs/blob/main/RCE%20via%20SQL%20Injection%20in%20Online%20Food%20Ordering%20System.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.289825"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.289825"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.472104"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T15:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-p2qj-4vvc-6qvv/GHSA-p2qj-4vvc-6qvv.json b/advisories/unreviewed/2024/12/GHSA-p2qj-4vvc-6qvv/GHSA-p2qj-4vvc-6qvv.json
new file mode 100644
index 00000000000..e083730eabf
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-p2qj-4vvc-6qvv/GHSA-p2qj-4vvc-6qvv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p2qj-4vvc-6qvv",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-56206"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Amarjeet Amar allows Authentication Bypass.This issue affects gap-hub-user-role: from n/a through 3.4.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56206"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/gap-hub-user-role/vulnerability/wordpress-gap-hub-user-role-plugin-3-4-1-csrf-to-broken-authentication-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-p7pp-hg4x-vrv6/GHSA-p7pp-hg4x-vrv6.json b/advisories/unreviewed/2024/12/GHSA-p7pp-hg4x-vrv6/GHSA-p7pp-hg4x-vrv6.json
new file mode 100644
index 00000000000..afc08887b88
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-p7pp-hg4x-vrv6/GHSA-p7pp-hg4x-vrv6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p7pp-hg4x-vrv6",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-49694"
+  ],
+  "details": "Missing Authorization vulnerability in imw3 My Wp Brand – Hide menu & Hide Plugin.This issue affects My Wp Brand – Hide menu & Hide Plugin: from n/a through 1.1.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49694"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/my-wp-brand/vulnerability/wordpress-my-wp-brand-hide-menu-hide-plugin-plugin-1-1-2-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-pph7-qgw4-5mjg/GHSA-pph7-qgw4-5mjg.json b/advisories/unreviewed/2024/12/GHSA-pph7-qgw4-5mjg/GHSA-pph7-qgw4-5mjg.json
new file mode 100644
index 00000000000..8c3b0cc3d7f
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-pph7-qgw4-5mjg/GHSA-pph7-qgw4-5mjg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pph7-qgw4-5mjg",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56042"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS allows SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.5.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56042"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-5-3-unauthenticated-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-pq8x-v483-w8hj/GHSA-pq8x-v483-w8hj.json b/advisories/unreviewed/2024/12/GHSA-pq8x-v483-w8hj/GHSA-pq8x-v483-w8hj.json
new file mode 100644
index 00000000000..97eeeedf204
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-pq8x-v483-w8hj/GHSA-pq8x-v483-w8hj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pq8x-v483-w8hj",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56045"
+  ],
+  "details": "Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue affects WPLMS: from n/a before 1.9.9.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56045"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wplms-plugin/vulnerability/wordpress-wplms-plugin-1-9-9-5-unauthenticated-arbitrary-directory-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-35"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-r55v-gf2r-mcgv/GHSA-r55v-gf2r-mcgv.json b/advisories/unreviewed/2024/12/GHSA-r55v-gf2r-mcgv/GHSA-r55v-gf2r-mcgv.json
new file mode 100644
index 00000000000..c607f8f4692
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-r55v-gf2r-mcgv/GHSA-r55v-gf2r-mcgv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r55v-gf2r-mcgv",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2024-56039"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP allows SQL Injection.This issue affects VibeBP: from n/a before 1.9.9.7.7.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56039"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/vibebp/vulnerability/wordpress-vibebp-plugin-1-9-9-7-7-unauthenticated-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:07Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-vj29-vrh9-6589/GHSA-vj29-vrh9-6589.json b/advisories/unreviewed/2024/12/GHSA-vj29-vrh9-6589/GHSA-vj29-vrh9-6589.json
new file mode 100644
index 00000000000..a036ae0b27d
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-vj29-vrh9-6589/GHSA-vj29-vrh9-6589.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vj29-vrh9-6589",
+  "modified": "2024-12-31T15:30:44Z",
+  "published": "2024-12-31T15:30:44Z",
+  "aliases": [
+    "CVE-2023-50850"
+  ],
+  "details": "Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50850"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/woocommerce-subscriptions/vulnerability/wordpress-woo-subscriptions-plugin-5-8-0-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-vxm9-cgrp-h5gq/GHSA-vxm9-cgrp-h5gq.json b/advisories/unreviewed/2024/12/GHSA-vxm9-cgrp-h5gq/GHSA-vxm9-cgrp-h5gq.json
new file mode 100644
index 00000000000..1e0c545e379
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-vxm9-cgrp-h5gq/GHSA-vxm9-cgrp-h5gq.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vxm9-cgrp-h5gq",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56071"
+  ],
+  "details": "Incorrect Privilege Assignment vulnerability in Mike Leembruggen Simple Dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through 2.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56071"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/simple-dashboard/vulnerability/wordpress-simple-dashboard-plugin-2-0-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T13:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-wg38-39hv-rp97/GHSA-wg38-39hv-rp97.json b/advisories/unreviewed/2024/12/GHSA-wg38-39hv-rp97/GHSA-wg38-39hv-rp97.json
new file mode 100644
index 00000000000..c44c9fe470f
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-wg38-39hv-rp97/GHSA-wg38-39hv-rp97.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wg38-39hv-rp97",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-51667"
+  ],
+  "details": "Missing Authorization vulnerability in David de Boer Paytium.This issue affects Paytium: from n/a through 4.4.10.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51667"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/paytium/vulnerability/wordpress-paytium-plugin-4-4-10-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-wgqq-9qh8-wvqv/GHSA-wgqq-9qh8-wvqv.json b/advisories/unreviewed/2024/12/GHSA-wgqq-9qh8-wvqv/GHSA-wgqq-9qh8-wvqv.json
new file mode 100644
index 00000000000..621a182fd14
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-wgqq-9qh8-wvqv/GHSA-wgqq-9qh8-wvqv.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wgqq-9qh8-wvqv",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-25133"
+  ],
+  "details": "A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25133"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openshift/hive/pull/2306"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2260372"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T15:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-wx9w-mg64-m22c/GHSA-wx9w-mg64-m22c.json b/advisories/unreviewed/2024/12/GHSA-wx9w-mg64-m22c/GHSA-wx9w-mg64-m22c.json
new file mode 100644
index 00000000000..42dd87aad90
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-wx9w-mg64-m22c/GHSA-wx9w-mg64-m22c.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wx9w-mg64-m22c",
+  "modified": "2024-12-31T15:30:45Z",
+  "published": "2024-12-31T15:30:45Z",
+  "aliases": [
+    "CVE-2024-56002"
+  ],
+  "details": "Missing Authorization vulnerability in Porthas Inc. Contact Form, Survey & Form Builder – MightyForms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through 1.3.9.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56002"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/mightyforms/vulnerability/wordpress-contact-form-survey-form-builder-mightyforms-plugin-1-3-9-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/12/GHSA-xvg7-rj7x-j6gm/GHSA-xvg7-rj7x-j6gm.json b/advisories/unreviewed/2024/12/GHSA-xvg7-rj7x-j6gm/GHSA-xvg7-rj7x-j6gm.json
new file mode 100644
index 00000000000..1510f18906b
--- /dev/null
+++ b/advisories/unreviewed/2024/12/GHSA-xvg7-rj7x-j6gm/GHSA-xvg7-rj7x-j6gm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xvg7-rj7x-j6gm",
+  "modified": "2024-12-31T15:30:46Z",
+  "published": "2024-12-31T15:30:46Z",
+  "aliases": [
+    "CVE-2024-56204"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Yonatan Reinberg of Social Ink Sinking Dropdowns allows Privilege Escalation.This issue affects Sinking Dropdowns: from n/a through 1.25.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56204"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/sinking-dropdowns/vulnerability/wordpress-sinking-dropdowns-plugin-1-25-csrf-to-privilege-escalation-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-31T14:15:25Z"
+  }
+}
\ No newline at end of file