Skip to content

Commit 6d8ab06

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent c36e06f commit 6d8ab06

122 files changed

Lines changed: 3855 additions & 7 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/unreviewed/2022/05/GHSA-4x9x-w43j-xc8w/GHSA-4x9x-w43j-xc8w.json‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4x9x-w43j-xc8w",
4-
"modified": "2022-05-24T19:21:14Z",
4+
"modified": "2026-01-23T15:31:33Z",
55
"published": "2022-05-24T19:21:14Z",
66
"aliases": [
77
"CVE-2021-24713"
88
],
99
"details": "The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their settings, which could allow high privilege users to perform Cross-Site Scripting attacks",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{

‎advisories/unreviewed/2024/11/GHSA-4h3w-cwc4-8rm4/GHSA-4h3w-cwc4-8rm4.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4h3w-cwc4-8rm4",
4-
"modified": "2024-11-11T06:30:34Z",
4+
"modified": "2026-01-23T15:31:33Z",
55
"published": "2024-11-11T06:30:34Z",
66
"aliases": [
77
"CVE-2024-51791"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51791"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51791"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://patchstack.com/database/vulnerability/forms-by-made-it/wordpress-forms-plugin-2-8-0-arbitrary-file-upload-vulnerability?_s_id=cve"

‎advisories/unreviewed/2025/05/GHSA-h2mm-jj4p-hm2p/GHSA-h2mm-jj4p-hm2p.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-h2mm-jj4p-hm2p",
4-
"modified": "2026-01-22T21:33:42Z",
4+
"modified": "2026-01-23T15:31:34Z",
55
"published": "2025-05-22T00:34:03Z",
66
"aliases": [
77
"CVE-2025-34026"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34026"

‎advisories/unreviewed/2026/01/GHSA-274q-qxhh-9h7p/GHSA-274q-qxhh-9h7p.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-274q-qxhh-9h7p",
4+
"modified": "2026-01-23T15:31:35Z",
5+
"published": "2026-01-23T15:31:35Z",
6+
"aliases": [
7+
"CVE-2026-24529"
8+
],
9+
"details": "Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Restaurant Reservations: from n/a through <= 1.6.7.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24529"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/quick-restaurant-reservations/vulnerability/wordpress-quick-restaurant-reservations-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-862"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:08Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-2mm7-c9cw-wf2r/GHSA-2mm7-c9cw-wf2r.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2mm7-c9cw-wf2r",
4+
"modified": "2026-01-23T15:31:37Z",
5+
"published": "2026-01-23T15:31:37Z",
6+
"aliases": [
7+
"CVE-2026-24571"
8+
],
9+
"details": "Missing Authorization vulnerability in boxnow BOX NOW Delivery box-now-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BOX NOW Delivery: from n/a through <= 3.0.2.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24571"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/box-now-delivery/vulnerability/wordpress-box-now-delivery-plugin-3-0-2-broken-access-control-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-862"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:15Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-2rfr-c32c-x6p3/GHSA-2rfr-c32c-x6p3.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2rfr-c32c-x6p3",
4+
"modified": "2026-01-23T15:31:37Z",
5+
"published": "2026-01-23T15:31:37Z",
6+
"aliases": [
7+
"CVE-2026-24576"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in COP UX Flat ux-flat allows Stored XSS.This issue affects UX Flat: from n/a through <= 5.4.0.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24576"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/ux-flat/vulnerability/wordpress-ux-flat-plugin-5-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-79"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:15Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-343j-9r8x-295r/GHSA-343j-9r8x-295r.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-343j-9r8x-295r",
4+
"modified": "2026-01-23T15:31:35Z",
5+
"published": "2026-01-23T15:31:35Z",
6+
"aliases": [
7+
"CVE-2026-24532"
8+
],
9+
"details": "Missing Authorization vulnerability in SiteLock SiteLock Security sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security: from n/a through <= 5.0.2.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24532"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/sitelock/vulnerability/wordpress-sitelock-security-plugin-5-0-2-broken-access-control-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-862"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:09Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-382j-74x3-hwj5/GHSA-382j-74x3-hwj5.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-382j-74x3-hwj5",
4+
"modified": "2026-01-23T15:31:36Z",
5+
"published": "2026-01-23T15:31:36Z",
6+
"aliases": [
7+
"CVE-2026-24538"
8+
],
9+
"details": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through <= 1.6.6.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24538"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/omnipress/vulnerability/wordpress-omnipress-plugin-1-6-6-local-file-inclusion-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-98"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:09Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-387g-7jpp-vpxj/GHSA-387g-7jpp-vpxj.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-387g-7jpp-vpxj",
4+
"modified": "2026-01-23T15:31:38Z",
5+
"published": "2026-01-23T15:31:38Z",
6+
"aliases": [
7+
"CVE-2026-24620"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.3.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24620"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/page-builder-add/vulnerability/wordpress-landing-page-builder-plugin-1-5-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-79"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:21Z"
30+
}
31+
}

‎advisories/unreviewed/2026/01/GHSA-3hhg-38p8-799x/GHSA-3hhg-38p8-799x.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3hhg-38p8-799x",
4+
"modified": "2026-01-23T15:31:38Z",
5+
"published": "2026-01-23T15:31:38Z",
6+
"aliases": [
7+
"CVE-2026-24621"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through <= 3.4.9.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24621"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://patchstack.com/database/Wordpress/Plugin/terms-descriptions/vulnerability/wordpress-terms-descriptions-plugin-3-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-79"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-01-23T15:16:21Z"
30+
}
31+
}

0 commit comments

Comments
 (0)