diff --git a/cves/2024/3xxx/CVE-2024-3055.json b/cves/2024/3xxx/CVE-2024-3055.json new file mode 100644 index 000000000000..c1a1bd8284e3 --- /dev/null +++ b/cves/2024/3xxx/CVE-2024-3055.json @@ -0,0 +1,89 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-3055", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2024-03-28T19:53:33.656Z", + "datePublished": "2024-05-10T21:32:43.333Z", + "dateUpdated": "2024-05-10T21:32:43.333Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2024-05-10T21:32:43.333Z" + }, + "affected": [ + { + "vendor": "unitecms", + "product": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates)", + "versions": [ + { + "version": "*", + "status": "affected", + "lessThanOrEqual": "1.5.102", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database." + } + ], + "title": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ebc0c8e6-a365-4ef7-9c1a-41454855096c?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/tags/1.5.93/inc_php/framework/db.class.php#L238" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3081509%40unlimited-elements-for-elementor%2Ftrunk&old=3076456%40unlimited-elements-for-elementor%2Ftrunk&sfp_email=&sfph_mail=" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "wesley" + } + ], + "timeline": [ + { + "time": "2024-05-10T08:41:48.000+00:00", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/cves/2024/4xxx/CVE-2024-4213.json b/cves/2024/4xxx/CVE-2024-4213.json new file mode 100644 index 000000000000..0708f46a72c7 --- /dev/null +++ b/cves/2024/4xxx/CVE-2024-4213.json @@ -0,0 +1,86 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-4213", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2024-04-25T18:49:12.554Z", + "datePublished": "2024-05-10T21:32:41.868Z", + "dateUpdated": "2024-05-10T21:32:41.868Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2024-05-10T21:32:41.868Z" + }, + "affected": [ + { + "vendor": "levelfourstorefront", + "product": "Shopping Cart & eCommerce Store", + "versions": [ + { + "version": "*", + "status": "affected", + "lessThanOrEqual": "5.6.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as payment details, addresses and other PII." + } + ], + "title": "Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/93daab72-1243-4a05-91d3-9254a1aac727?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3084202/wp-easycart/trunk/admin/inc/wp_easycart_admin.php?old=3068711&old_path=wp-easycart%2Ftrunk%2Fadmin%2Finc%2Fwp_easycart_admin.php" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-922 Insecure Storage of Sensitive Information" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "rajesh patil" + } + ], + "timeline": [ + { + "time": "2024-05-10T09:18:19.000+00:00", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/cves/2024/4xxx/CVE-2024-4413.json b/cves/2024/4xxx/CVE-2024-4413.json new file mode 100644 index 000000000000..8fc32f962ed4 --- /dev/null +++ b/cves/2024/4xxx/CVE-2024-4413.json @@ -0,0 +1,89 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-4413", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2024-05-02T09:29:13.383Z", + "datePublished": "2024-05-10T21:32:41.138Z", + "dateUpdated": "2024-05-10T21:32:41.138Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2024-05-10T21:32:41.138Z" + }, + "affected": [ + { + "vendor": "jetmonsters", + "product": "Hotel Booking Lite", + "versions": [ + { + "version": "*", + "status": "affected", + "lessThanOrEqual": "4.11.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code." + } + ], + "title": "Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1d7f1283-a274-49a2-8bec-da178771b13a?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/motopress-hotel-booking-lite/trunk/includes/shortcodes/checkout-shortcode/step-checkout.php#L149" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3084187%40motopress-hotel-booking-lite%2Ftrunk&old=3081058%40motopress-hotel-booking-lite%2Ftrunk&sfp_email=&sfph_mail=" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-502 Deserialization of Untrusted Data" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Trinh Vu" + } + ], + "timeline": [ + { + "time": "2024-05-10T09:13:08.000+00:00", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/cves/2024/4xxx/CVE-2024-4417.json b/cves/2024/4xxx/CVE-2024-4417.json new file mode 100644 index 000000000000..bdb0d08ed8c5 --- /dev/null +++ b/cves/2024/4xxx/CVE-2024-4417.json @@ -0,0 +1,86 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-4417", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2024-05-02T10:39:42.369Z", + "datePublished": "2024-05-10T21:32:42.365Z", + "dateUpdated": "2024-05-10T21:32:42.365Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2024-05-10T21:32:42.365Z" + }, + "affected": [ + { + "vendor": "sbouey", + "product": "Falang multilanguage for WordPress", + "versions": [ + { + "version": "*", + "status": "affected", + "lessThanOrEqual": "1.3.49", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled." + } + ], + "title": "Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b62949fd-d73f-4c42-82c7-c29986bca1da?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3082466%40falang%2Ftrunk&old=3059173%40falang%2Ftrunk&sfp_email=&sfph_mail=" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Benedictus Jovan" + } + ], + "timeline": [ + { + "time": "2024-05-10T08:52:17.000+00:00", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/cves/2024/4xxx/CVE-2024-4430.json b/cves/2024/4xxx/CVE-2024-4430.json new file mode 100644 index 000000000000..b396128e3385 --- /dev/null +++ b/cves/2024/4xxx/CVE-2024-4430.json @@ -0,0 +1,89 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-4430", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2024-05-02T13:21:40.529Z", + "datePublished": "2024-05-10T21:32:42.878Z", + "dateUpdated": "2024-05-10T21:32:42.878Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2024-05-10T21:32:42.878Z" + }, + "affected": [ + { + "vendor": "justinbusa", + "product": "Beaver Builder – WordPress Page Builder", + "versions": [ + { + "version": "*", + "status": "affected", + "lessThanOrEqual": "2.8.1.2", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in all versions up to, and including, 2.8.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "title": "Beaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cd6ed285-f215-44d3-9db9-9b2bfffee60a?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3083534%40beaver-builder-lite-version%2Ftrunk&old=3078825%40beaver-builder-lite-version%2Ftrunk&sfp_email=&sfph_mail=" + }, + { + "url": "https://www.wpbeaverbuilder.com/change-logs/?utm_medium=bb-lite&utm_source=repo-readme&utm_campaign=repo-changelog-page" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Thanh Nam Tran" + } + ], + "timeline": [ + { + "time": "2024-05-10T08:49:41.000+00:00", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/cves/delta.json b/cves/delta.json index 8846a6def5ef..34b2bdee3f33 100644 --- a/cves/delta.json +++ b/cves/delta.json @@ -1,12 +1,36 @@ { - "fetchTime": "2024-05-10T21:07:09.759Z", - "numberOfChanges": 1, + "fetchTime": "2024-05-10T21:37:03.936Z", + "numberOfChanges": 5, "new": [ { - "cveId": "CVE-2024-4738", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4738", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4738.json", - "dateUpdated": "2024-05-10T21:00:05.568Z" + "cveId": "CVE-2024-3055", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-3055", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3055.json", + "dateUpdated": "2024-05-10T21:32:43.333Z" + }, + { + "cveId": "CVE-2024-4213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4213.json", + "dateUpdated": "2024-05-10T21:32:41.868Z" + }, + { + "cveId": "CVE-2024-4413", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4413", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4413.json", + "dateUpdated": "2024-05-10T21:32:41.138Z" + }, + { + "cveId": "CVE-2024-4417", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4417", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4417.json", + "dateUpdated": "2024-05-10T21:32:42.365Z" + }, + { + "cveId": "CVE-2024-4430", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4430", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4430.json", + "dateUpdated": "2024-05-10T21:32:42.878Z" } ], "updated": [], diff --git a/cves/deltaLog.json b/cves/deltaLog.json index 3ab66e60d0c9..03c71ea2787f 100644 --- a/cves/deltaLog.json +++ b/cves/deltaLog.json @@ -1,4 +1,42 @@ [ + { + "fetchTime": "2024-05-10T21:37:03.936Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2024-3055", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-3055", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3055.json", + "dateUpdated": "2024-05-10T21:32:43.333Z" + }, + { + "cveId": "CVE-2024-4213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4213.json", + "dateUpdated": "2024-05-10T21:32:41.868Z" + }, + { + "cveId": "CVE-2024-4413", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4413", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4413.json", + "dateUpdated": "2024-05-10T21:32:41.138Z" + }, + { + "cveId": "CVE-2024-4417", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4417", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4417.json", + "dateUpdated": "2024-05-10T21:32:42.365Z" + }, + { + "cveId": "CVE-2024-4430", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-4430", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4430.json", + "dateUpdated": "2024-05-10T21:32:42.878Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2024-05-10T21:07:09.759Z", "numberOfChanges": 1, @@ -64126,19 +64164,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2024-04-10T21:16:51.480Z", - "numberOfChanges": 1, - "new": [ - { - "cveId": "CVE-2024-29504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-29504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29504.json", - "dateUpdated": "2024-04-10T21:09:29.293653" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file