From bffce45073f9fffeac3a55f40f377b2b7fc351c0 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sat, 24 Aug 2024 06:32:10 +0000
Subject: [PATCH] Publish GHSA-c9x2-m7q5-frxf

---
 .../GHSA-c9x2-m7q5-frxf.json                  | 46 +++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-c9x2-m7q5-frxf/GHSA-c9x2-m7q5-frxf.json

diff --git a/advisories/unreviewed/2024/08/GHSA-c9x2-m7q5-frxf/GHSA-c9x2-m7q5-frxf.json b/advisories/unreviewed/2024/08/GHSA-c9x2-m7q5-frxf/GHSA-c9x2-m7q5-frxf.json
new file mode 100644
index 00000000000..947db966dd7
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-c9x2-m7q5-frxf/GHSA-c9x2-m7q5-frxf.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c9x2-m7q5-frxf",
+  "modified": "2024-08-24T06:30:31Z",
+  "published": "2024-08-24T06:30:31Z",
+  "aliases": [
+    "CVE-2024-6499"
+  ],
+  "details": "The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6499"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/maxbuttons/trunk/assets/libraries/font-awesome-5/convert.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3140369/maxbuttons/tags/9.8.0/assets/libraries/font-awesome-5/convert.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fdd0694c-ea7e-4cf8-a8d8-82a2b02fecdf?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-24T04:15:07Z"
+  }
+}
\ No newline at end of file