6171 matches found
CVE-2022-24580
CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.
CVE-2023-5947
CVE-2023-5947 is a duplicate of CVE-2023-7247 and should reference CVE-2023-7247 instead. The connected records (Red Hat and NVD) describe CVE-2023-7247 as a vulnerability in the WordPress plugin Login as User or Customer (
CVE-2023-6092
CVE-2023-6092 entry is rejected/not used according to the description.
CVE-2024-1469
CVE-2024-1469 is a duplicate entry; the connected document confirms this and points to CVE-2024-0845 as the valid reference. CVE-2024-0845 concerns PDF Viewer for Elementor (WordPress) up to version 2.9.3, with an authenticated Stored Cross-Site Scripting vulnerability via the render function. Th...
CVE-2023-4621
CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...
CVE-2024-1373
Summary : CVE-2023-46209 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin G5Theme Grid Plus – Unlimited grid , affecting versions ≤ 1.3.2. The issue allows script injection via reflected input and is observed in the plugin stack described in multipl...
CVE-2024-4579
CVE-2024-4579 is a reservation/duplicate of CVE-2024-4295. The connected data for CVE-2024-4295 shows an unauthenticated SQL injection in Email Subscribers by Icegram Express
CVE-2024-1788
CVE-2024-1788 is a duplicate of CVE-2023-2813. The connected NUCLEI template specifies a reflected cross-site scripting (XSS) issue in Wordpress themes caused by the search box reflecting results, enabling an unauthenticated attacker to exploit users who click a crafted link. Affected products in...
CVE-2024-4998
CVE-2024-4998 is a reservation/duplicate of CVE-2024-4566; the latter concerns ShopLentor for WordPress with unauthorized modification of data due to a missing capability check on ajax_dismiss in all versions up to 2.8.8. The entry for CVE-2024-4566 is marked as patched. This CVE-4998 entry shoul...
CVE-2023-3451
CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...
CVE-2023-6079
CVE-2023-6079 is a duplicate of CVE-2023-40206. Affected product: hwk-fr WordPress plugin “WP 404 Auto Redirect to Similar Post” (versions
CVE-2023-5755
CVE-2023-5755 is a duplicate of CVE-2023-46784 and adds no new technical details. The flaw affects the WordPress ICS Calendar plugin (ics-calendar) prior to version 10.12.0.3, caused by improper limitation of a pathname, enabling Path Traversal and SSRF. The connected CVE-2023-46784 entry confirm...
CVE-2024-5609
CVE-2024-5609 is a rejected candidate; reference CVE-2023-6966 instead.
CVE-2024-1992
CVE-2024-1992 is a duplicate of CVE-2024-2306. Connected record CVE-2024-2306 documents a Stored XSS in the Revslider WordPress plugin via SVG uploads, affecting all versions up to 6.6.20. Exploitation requires authenticated access (administrators by default, with broader access potentially via c...
CVE-2023-2918
CVE-2023-2918 is rejected/not used per the Initial Description.
CVE-2023-39977
CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2023-40270
CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...
CVE-2023-5442
CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...