Publish Advisories

advisory-database[bot] · advisory-database[bot] · commit eb03b9c24422 · 2025-07-17T09:32:26.000Z
GHSA-9786-79mw-2pj9 GHSA-498r-64c2-wwrm
diff --git a/advisories/unreviewed/2024/12/GHSA-9786-79mw-2pj9/GHSA-9786-79mw-2pj9.json b/advisories/unreviewed/2024/12/GHSA-9786-79mw-2pj9/GHSA-9786-79mw-2pj9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9786-79mw-2pj9",
-  "modified": "2025-07-10T03:32:11Z",
+  "modified": "2025-07-17T09:30:31Z",
   "published": "2024-12-31T03:30:33Z",
   "aliases": [
     "CVE-2024-45497"
@@ -27,6 +27,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:10294"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:10747"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:9269"
diff --git a/advisories/unreviewed/2025/07/GHSA-498r-64c2-wwrm/GHSA-498r-64c2-wwrm.json b/advisories/unreviewed/2025/07/GHSA-498r-64c2-wwrm/GHSA-498r-64c2-wwrm.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-498r-64c2-wwrm",
+  "modified": "2025-07-17T09:30:31Z",
+  "published": "2025-07-17T09:30:31Z",
+  "aliases": [
+    "CVE-2025-4302"
+  ],
+  "details": "The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4302"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/19f67d6e-4ffe-4126-ac42-fb23c5017a3e"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-07-17T08:15:27Z"
+  }
+}
