5900 matches found
CVE-2022-3403
CVE-2022-3403 is a duplicate of CVE-2023-28931. Connected records show that CVE-2023-28931 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Never5 Post Connector WordPress plugin versions <= 1.0.9. The available sources confirm the issue type (stored XSS) and affected softwar...
CVE-2024-2875
CVE-2024-2875 is a rejected/duplicate entry; this CVE is not active and should be replaced by CVE-2024-4258.
CVE-2023-46267
CVE-2023-46267 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-1864
CVE-2024-1864 is a duplicate of CVE-2023-2813 and is not a separate vulnerability entry. The connected NUCLEI template for CVE-2023-2813 describes a reflected XSS in WordPress themes (Aapna/Anand/Anfaust/Arendelle/… and more) where the search box reflects results, allowing an unauthenticated atta...
CVE-2023-30183
CVE-2023-30183 is a reservation duplicate of CVE-2023-30349; CVE-2023-30349 affects JFinal CMS v5.1.0 and describes a remote code execution via the ActionEnter function. Connected sources confirm RCE details; no patch/version fixes are provided in the supplied documents. Exploitation status and i...
CVE-2023-26931
CVE-2023-26931 is rejected and should not be used; reference CVE-2022-30524.
CVE-2023-5755
CVE-2023-5755 is a duplicate of CVE-2023-46784 and adds no new technical details. The flaw affects the WordPress ICS Calendar plugin (ics-calendar) prior to version 10.12.0.3, caused by improper limitation of a pathname, enabling Path Traversal and SSRF. The connected CVE-2023-46784 entry confirm...
CVE-2021-34250
CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...
CVE-2024-1087
CVE-2024-1087 is rejected; this CVE entry is not used and does not represent an active vulnerability.
CVE-2021-34064
CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...
CVE-2024-4631
CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.
CVE-2023-34255
CVE-2023-34255 is rejected/not used and does not represent an active vulnerability entry.
CVE-2022-24580
CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.
CVE-2024-2167
This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-5773
CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...
CVE-2022-27458
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...
CVE-2021-42248
Removed by vendor...
CVE-2024-2545
CVE-2024-2545 is a duplicate of CVE-2024-1730 and has been marked as Rejected/not to be used; refer to CVE-2024-1730 for the actual vulnerability context (Stored XSS in Prime Slider – Addons For Elementor WordPress plugin up to v3.14.0 due to insufficient input sanitization and output escaping).
CVE-2024-1865
The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...