{"vulnerability": "cve-2024-5429", "sightings": [{"uuid": "6fad07a7-b45a-47ae-8789-f745d94eeaf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54290", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648408631822042", "content": "", "creation_timestamp": "2024-12-14T00:44:55.477927Z"}, {"uuid": "a26e7799-9364-4686-a475-23e2717b3573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54292", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648467628403995", "content": "", "creation_timestamp": "2024-12-14T00:59:55.353024Z"}, {"uuid": "5946622e-c6c7-4706-9faf-9a0c48ce4adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54293", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648467642175567", "content": "", "creation_timestamp": "2024-12-14T00:59:55.642616Z"}, {"uuid": "3067e2dd-1caa-4d4e-947f-8195d45bad62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54295", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648467689963073", "content": "", "creation_timestamp": "2024-12-14T00:59:56.280056Z"}, {"uuid": "0a216379-218c-4f84-98a3-1a372d291a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54294", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648467675920994", "content": "", "creation_timestamp": "2024-12-14T00:59:56.402893Z"}, {"uuid": "2453b268-df0e-40fc-966b-e98a9e3bc66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54296", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648526689446526", "content": "", "creation_timestamp": "2024-12-14T01:14:56.577054Z"}, {"uuid": "475d9909-6f3a-4aa3-b46e-612bfa3185ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648526703011987", "content": "", "creation_timestamp": "2024-12-14T01:14:56.922461Z"}, {"uuid": "d3e6eb6a-01e1-45ab-b102-d1a9e865c389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54299", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648526730186691", "content": "", "creation_timestamp": "2024-12-14T01:14:57.058051Z"}, {"uuid": "68f788a8-71b4-4ce0-a6a5-59291636f18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54298", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648526716105480", "content": "", "creation_timestamp": "2024-12-14T01:14:57.407736Z"}, {"uuid": "8b76b48e-99ce-4d4b-87e1-64b6f82c6f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54292", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826826243687102", "content": "", "creation_timestamp": "2025-01-14T12:58:51.659318Z"}, {"uuid": "17534a40-4a2d-4158-bba3-8ecfba711eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54291", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llhe4n3ix52r", "content": "", "creation_timestamp": "2025-03-28T17:37:11.876925Z"}, {"uuid": "8ddf5020-f3db-4e86-8f6d-ab6c8a72fbc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54291", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-54291\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound PluginPass allows Manipulating Web Input to File System Calls. This issue affects PluginPass: from n/a through 0.9.10.\n\ud83d\udccf Published: 2025-03-28T15:12:24.866Z\n\ud83d\udccf Modified: 2025-03-28T15:12:24.866Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/pluginpass-pro-plugintheme-licensing/vulnerability/wordpress-pluginpass-plugin-0-9-10-arbitrary-file-download-delete-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-28T15:28:51.000000Z"}, {"uuid": "91e88b2f-aeb3-4076-81d1-e6dbb55456c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54291", "type": "seen", "source": "https://t.me/cvedetector/21449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-54291 - Apache NotFound PluginPass Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-54291 \nPublished : March 28, 2025, 3:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound PluginPass allows Manipulating Web Input to File System Calls. This issue affects PluginPass: from n/a through 0.9.10. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T17:45:32.000000Z"}, {"uuid": "0137c19e-3fc8-455d-a7bc-2fa09a2b2ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5429", "type": "seen", "source": "https://t.me/cvedetector/8148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5429 - Apache Logo Slider Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5429 \nPublished : Oct. 17, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Logo Slider  WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-17T09:07:03.000000Z"}]}