Skip to content

Commit

Permalink
5 changes (5 new | 0 updated):
Browse files Browse the repository at this point in the history 
      - 5 new CVEs:  CVE-2024-3055, CVE-2024-4213, CVE-2024-4413, CVE-2024-4417, CVE-2024-4430
      - 0 updated CVEs:
  • Loading branch information
cvelistV5 Github Action committed May 10, 2024
1 parent 92d5bb7 commit e70c457
Show file tree
Hide file tree
Showing 7 changed files with 507 additions and 20 deletions.
89 changes: 89 additions & 0 deletions cves/2024/3xxx/CVE-2024-3055.json
View file
@@ -0,0 +1,89 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-3055",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2024-03-28T19:53:33.656Z",
"datePublished": "2024-05-10T21:32:43.333Z",
"dateUpdated": "2024-05-10T21:32:43.333Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2024-05-10T21:32:43.333Z"
},
"affected": [
{
"vendor": "unitecms",
"product": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates)",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "1.5.102",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
}
],
"title": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ebc0c8e6-a365-4ef7-9c1a-41454855096c?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/tags/1.5.93/inc_php/framework/db.class.php#L238"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3081509%40unlimited-elements-for-elementor%2Ftrunk&old=3076456%40unlimited-elements-for-elementor%2Ftrunk&sfp_email=&sfph_mail="
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "wesley"
}
],
"timeline": [
{
"time": "2024-05-10T08:41:48.000+00:00",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
86 changes: 86 additions & 0 deletions cves/2024/4xxx/CVE-2024-4213.json
View file
@@ -0,0 +1,86 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-4213",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2024-04-25T18:49:12.554Z",
"datePublished": "2024-05-10T21:32:41.868Z",
"dateUpdated": "2024-05-10T21:32:41.868Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2024-05-10T21:32:41.868Z"
},
"affected": [
{
"vendor": "levelfourstorefront",
"product": "Shopping Cart & eCommerce Store",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "5.6.4",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as payment details, addresses and other PII."
}
],
"title": "Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/93daab72-1243-4a05-91d3-9254a1aac727?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3084202/wp-easycart/trunk/admin/inc/wp_easycart_admin.php?old=3068711&old_path=wp-easycart%2Ftrunk%2Fadmin%2Finc%2Fwp_easycart_admin.php"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-922 Insecure Storage of Sensitive Information"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "rajesh patil"
}
],
"timeline": [
{
"time": "2024-05-10T09:18:19.000+00:00",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
89 changes: 89 additions & 0 deletions cves/2024/4xxx/CVE-2024-4413.json
View file
@@ -0,0 +1,89 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-4413",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2024-05-02T09:29:13.383Z",
"datePublished": "2024-05-10T21:32:41.138Z",
"dateUpdated": "2024-05-10T21:32:41.138Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2024-05-10T21:32:41.138Z"
},
"affected": [
{
"vendor": "jetmonsters",
"product": "Hotel Booking Lite",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "4.11.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."
}
],
"title": "Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1d7f1283-a274-49a2-8bec-da178771b13a?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/browser/motopress-hotel-booking-lite/trunk/includes/shortcodes/checkout-shortcode/step-checkout.php#L149"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3084187%40motopress-hotel-booking-lite%2Ftrunk&old=3081058%40motopress-hotel-booking-lite%2Ftrunk&sfp_email=&sfph_mail="
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-502 Deserialization of Untrusted Data"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Trinh Vu"
}
],
"timeline": [
{
"time": "2024-05-10T09:13:08.000+00:00",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
86 changes: 86 additions & 0 deletions cves/2024/4xxx/CVE-2024-4417.json
View file
@@ -0,0 +1,86 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-4417",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2024-05-02T10:39:42.369Z",
"datePublished": "2024-05-10T21:32:42.365Z",
"dateUpdated": "2024-05-10T21:32:42.365Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2024-05-10T21:32:42.365Z"
},
"affected": [
{
"vendor": "sbouey",
"product": "Falang multilanguage for WordPress",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "1.3.49",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
}
],
"title": "Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b62949fd-d73f-4c42-82c7-c29986bca1da?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3082466%40falang%2Ftrunk&old=3059173%40falang%2Ftrunk&sfp_email=&sfph_mail="
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 4.4,
"baseSeverity": "MEDIUM"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Benedictus Jovan"
}
],
"timeline": [
{
"time": "2024-05-10T08:52:17.000+00:00",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}

0 comments on commit e70c457

Please sign in to comment.