{"resultsPerPage":7,"startIndex":0,"totalResults":7,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-12T17:48:02.976","vulnerabilities":[{"cve":{"id":"CVE-2021-24219","sourceIdentifier":"contact@wpscan.com","published":"2021-04-12T14:15:15.413","lastModified":"2026-06-17T03:39:37.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin before 2.4.5, Thrive Clever Widgets WordPress plugin before 1.57.1 and Rise by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0, Thrive Themes Builder WordPress theme before 2.2.4 register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty api_key parameter in vulnerable versions if Zapier was not enabled. Attackers could use this endpoint to add arbitrary data to a predefined option in the wp_options table."},{"lang":"es","value":"El plugin Thrive Optimize WordPress versiones anteriores a 1.4.13.3,  el plugin Thrive Comments WordPress versiones anteriores a 1.4.15.3, el plugin Thrive Headline Optimizer WordPress versiones anteriores a 1.3.7.3, el plugin Thrive Leads WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Ultimatum WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Quiz Builder WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Apprentice WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Visual Editor WordPress versiones anteriores a 2.6.7.4, el plugin Thrive Dashboard WordPress versiones anteriores a 2.3.9.3, el plugin Thrive Ovation WordPress versiones anteriores a 2.4.5, el plugin Thrive Clever Widgets WordPress versiones anteriores a 1.57.1 y Rise para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Ignition para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Luxe para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, FocusBlog para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Minus para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Squared para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, el tema Voice WordPress versiones anteriores a 2.0.0, Performag para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Pressive para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Storied para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, el temaThrive Themes Builder WordPress versiones anteriores a 2.2.4, registra un endpoint de la API REST asociado con la funcionalidad de Zapier.&#xa0;Si bien este endpoint estaba destinado a requerir una clave de API para acceder, era posible acceder a él proporcionando un parámetro api_key vacío en versiones vulnerables si Zapier no estaba habilitado.&#xa0;Los atacantes podrían usar este endpoint para agregar datos arbitrarios a una opción predefinida en la tabla wp_options"}],"affected":[{"source":"contact@wpscan.com","affectedData":[{"vendor":"Thrive Themes","product":"Thrive Optimize","versions":[{"version":"1.4.13.3","lessThan":"1.4.13.3","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Comments","versions":[{"version":"1.4.15.3","lessThan":"1.4.15.3","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Headline Optimizer","versions":[{"version":"1.3.7.3","lessThan":"1.3.7.3","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Leads","versions":[{"version":"2.3.9.4","lessThan":"2.3.9.4","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Ultimatum","versions":[{"version":"2.3.9.4","lessThan":"2.3.9.4","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Quiz Builder","versions":[{"version":"2.3.9.4","lessThan":"2.3.9.4","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Apprentice","versions":[{"version":"2.3.9.4","lessThan":"2.3.9.4","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Visual Editor","versions":[{"version":"2.6.7.4","lessThan":"2.6.7.4","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Dashboard","versions":[{"version":"2.3.9.3","lessThan":"2.3.9.3","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Ovation","versions":[{"version":"2.4.5","lessThan":"2.4.5","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Clever Widgets","versions":[{"version":"1.57.1","lessThan":"1.57.1","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Rise by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Ignition by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Luxe by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"FocusBlog by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Minus by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Squared by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Voice","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Performag by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Pressive by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Storied by Thrive Themes","versions":[{"version":"2.0.0","lessThan":"2.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Thrive Themes","product":"Thrive Themes Builder","versions":[{"version":"2.2.4","lessThan":"2.2.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"contact@wpscan.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:focusblog:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"3BB48628-4B45-4EA1-9687-CEB8FD91D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:ignition:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"34F8D47C-0A83-4F99-8DBD-93E84237FBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:luxe:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"1760E6FC-E15D-4F80-A703-F47FC34E0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:minus:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"C17B650A-18C6-4479-B9A3-8B765450EB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:performag:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"5C9BD6E6-F0D2-4C6D-B4A9-4C9DCB197F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:pressive:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"2C9C11DF-0A77-43FD-B2D6-4C9BB59855AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:rise:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"AEC69A5B-13F5-4B20-98E2-016CB0B22CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:squared:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"960214E4-1349-4C85-929C-2CF7A5295358"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:storied:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"9652A2E0-34E6-4308-B7C7-CC6F9D71AE67"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_apprentice:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.3.9.4","matchCriteriaId":"96E2DC47-B4B8-45FF-8AF9-ACF2F5BE5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_clever_widgets:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.57.1","matchCriteriaId":"EF154898-4115-4350-A398-31AF488685CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_comments:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.4.15.3","matchCriteriaId":"ADDAB456-1BFB-46D9-901D-43B3EB345D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_dashboard:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.3.9.3","matchCriteriaId":"84F3741F-5C7B-4D0A-B7DE-59D317CEF444"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_headline_optimizer:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.3.7.3","matchCriteriaId":"F05B68B6-29CB-4B5D-BD79-D87B24F161A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_optimize:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.4.13.3","matchCriteriaId":"E032C438-D4B5-41EF-8BD2-12AA8CF71201"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_ovation:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.4.5","matchCriteriaId":"70B26EBB-3E01-479F-9A5F-26C203BAB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_quiz_builder:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.3.9.4","matchCriteriaId":"01E54305-0BB0-4B25-B751-96A8B6495ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_themes_builder:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.2.4","matchCriteriaId":"86931663-0F2C-4A5F-A412-B9FE51FC954C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:thrive_visual_editor:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.6.7.4","matchCriteriaId":"7FC5C8D7-3FA9-437D-8F99-9E472DCD68BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thrivethemes:voice:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"1A4ACF69-0C88-4765-A028-4DD2DDDA7743"}]}]}],"references":[{"url":"https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900","source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild","source":"contact@wpscan.com","tags":["Third Party Advisory"]},{"url":"https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-28802","sourceIdentifier":"cve@mitre.org","published":"2022-09-21T20:15:10.027","lastModified":"2026-06-17T04:39:05.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unintentionally granted full access to all users of a company's account, but was supposed to enforce role-based access control within that company's account. Before 2022-08-17, a customer could have resolved this by (in effect) using a separate virtual machine for an application that held credentials - or other secrets - that weren't supposed to be shared among all of its employees. (Multiple accounts would have been needed to operate these independent virtual machines.)"},{"lang":"es","value":"Code by Zapier versiones anteriores a 17-08-2022, permitía una escalada de privilegios dentro de la cuenta que incluía una ejecución de código Python o JavaScript. En otras palabras, Code by Zapier estaba proporcionando una máquina virtual de propósito general controlada por el cliente que involuntariamente otorgaba acceso completo a todos los usuarios de la cuenta de una empresa, pero suponía que debía hacer cumplir el control de acceso basado en roles dentro de la cuenta de esa empresa. En versiones anteriores a 17-08-2022, un cliente podría haber resuelto esto usando (en efecto) una máquina virtual separada para una aplicación que contuviera credenciales -u otros secretos- que no debían ser compartidos entre todos sus empleados. (Se habrían necesitado varias cuentas para operar estas máquinas virtuales independientes)"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-27T20:10:00.649850Z","id":"CVE-2022-28802","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zapier:code_by_zapier:*:*:*:*:*:*:*:*","versionEndExcluding":"2022-08-17","matchCriteriaId":"0B4E1EBB-D5DC-4967-9B03-BB194D2DBEBE"}]}]}],"references":[{"url":"https://www.zenity.io/blog/zapescape-organization-wide-control-over-code-by-zapier/","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.zenity.io/blog/zapescape-vulnerability-disclosure/","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.zenity.io/blog/zapescape-organization-wide-control-over-code-by-zapier/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.zenity.io/blog/zapescape-vulnerability-disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-28430","sourceIdentifier":"security-advisories@github.com","published":"2023-03-27T22:15:22.130","lastModified":"2026-06-17T05:47:41.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is triggered on issues (types: [closed]) (i.e., when an Issue is closed). The workflow starts with full write-permissions GitHub repository token since the default workflow permissions on Organization/Repository level are set to read-write. This workflow runs the following step with data controlled by the comment `(${{ github.event.issue.title }} – the full title of the Issue)`, allowing an attacker to take over the GitHub Runner and run custom commands, potentially stealing any secret (if used), or altering the repository. This issue was found with CodeQL using javascript’s Expression injection in Actions query. This issue has been addressed in the repositories github action. No actions are required by users. This issue is also tracked as `GHSL-2023-051`."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"OneSignal","product":"react-native-onesignal","versions":[{"version":"< 4.5.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-19T15:12:03.831591Z","id":"CVE-2023-28430","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onesignal:react-native-onesignal:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.1","matchCriteriaId":"78D30C1F-E0B0-48A2-8436-AA54D28A3830"}]}]}],"references":[{"url":"https://github.com/OneSignal/react-native-onesignal/commit/4a66f4237fb51dcc2236889038d488cd49b0f433","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/OneSignal/react-native-onesignal/commit/4e43bda4ce1eb395f36bb8a5640002523c051085","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://securitylab.github.com/advisories/GHSL-2023-051_React_Native_OneSignal_SDK/","source":"security-advisories@github.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/OneSignal/react-native-onesignal/commit/4a66f4237fb51dcc2236889038d488cd49b0f433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/OneSignal/react-native-onesignal/commit/4e43bda4ce1eb395f36bb8a5640002523c051085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://securitylab.github.com/advisories/GHSL-2023-051_React_Native_OneSignal_SDK/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-32134","sourceIdentifier":"audit@patchstack.com","published":"2024-04-15T08:15:14.090","lastModified":"2026-06-17T07:29:20.660","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook.This issue affects Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook: from n/a through 1.1.12."},{"lang":"es","value":"Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ('inyección SQL') en Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook. Este problema afecta a Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook: desde n/a hasta 1.1.12."}],"affected":[{"source":"audit@patchstack.com","affectedData":[{"vendor":"Nasirahmed","product":"Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook","defaultStatus":"unaffected","collectionURL":"https://wordpress.org/plugins","packageName":"forms-to-zapier","versions":[{"version":"n/a","lessThanOrEqual":"1.1.12","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"audit@patchstack.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-15T16:37:51.472890Z","id":"CVE-2024-32134","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://patchstack.com/database/vulnerability/forms-to-zapier/wordpress-forms-to-zapier-plugin-1-1-12-sql-injection-vulnerability?_s_id=cve","source":"audit@patchstack.com"},{"url":"https://patchstack.com/database/vulnerability/forms-to-zapier/wordpress-forms-to-zapier-plugin-1-1-12-sql-injection-vulnerability?_s_id=cve","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-13411","sourceIdentifier":"security@wordfence.com","published":"2025-03-26T12:15:13.880","lastModified":"2026-06-17T07:01:57.797","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Zapier for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5.1 via the updated_user() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services."},{"lang":"es","value":"El complemento Zapier para WordPress es vulnerable a Server-Side Request Forgery en todas las versiones hasta la 1.5.1 incluida, a través de la función updated_user(). Esto permite a atacantes autenticados, con acceso de suscriptor o superior, realizar solicitudes web a ubicaciones arbitrarias desde la aplicación web, las cuales pueden utilizarse para consultar y modificar información de servicios internos."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"zapier","product":"Zapier for WordPress","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-26T13:26:14.718830Z","id":"CVE-2024-13411","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L114","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L210","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/zapier/trunk/zapier.php#L284","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/changeset/3257975/","source":"security@wordfence.com"},{"url":"https://wordpress.org/plugins/zapier/#developers","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/701dc461-88e7-40bf-a4fb-f92723b6e05e?source=cve","source":"security@wordfence.com"}]}},{"cve":{"id":"CVE-2025-50010","sourceIdentifier":"audit@patchstack.com","published":"2025-06-20T15:15:26.507","lastModified":"2026-06-17T09:34:28.960","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zapier for WordPress: from n/a through <= 1.5.2."},{"lang":"es","value":"Vulnerabilidad de falta de autorización en Zapier Zapier for WordPress permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Zapier para WordPress desde la versión n/d hasta la 1.5.2."}],"affected":[{"source":"audit@patchstack.com","affectedData":[{"vendor":"Zapier","product":"Zapier for WordPress","defaultStatus":"unaffected","collectionURL":"https://wordpress.org/plugins","packageName":"zapier","versions":[{"version":"0","lessThanOrEqual":"1.5.2","versionType":"custom","status":"affected","changes":[{"at":"1.5.3","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV31":[{"source":"audit@patchstack.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-23T16:10:43.340506Z","id":"CVE-2025-50010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/zapier/vulnerability/wordpress-zapier-for-wordpress-plugin-1-5-2-broken-access-control-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}},{"cve":{"id":"CVE-2025-12770","sourceIdentifier":"security@wordfence.com","published":"2025-11-19T04:16:04.920","lastModified":"2026-06-17T08:32:55.680","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The New User Approve plugin for WordPress is vulnerable to unauthorized data disclosure in all versions up to, and including, 3.0.9 due to insufficient API key validation using loose equality comparison. This makes it possible for unauthenticated attackers to retrieve personally identifiable information (PII), including usernames and email addresses of users with various approval statuses via the Zapier REST API endpoints, by exploiting PHP type juggling with the api_key parameter set to \"0\" on sites where the Zapier API key has not been configured."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"saadiqbal","product":"New User Approve","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"3.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T19:10:08.756670Z","id":"CVE-2025-12770","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.0.9/includes/zapier/includes/rest-api.php#L104","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.0.9/includes/zapier/includes/rest-api.php#L40","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/new-user-approve/trunk/includes/zapier/includes/rest-api.php#L104","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f1cf77a-64b4-405b-adcb-ef16d9e82ab2?source=cve","source":"security@wordfence.com"}]}}]}