CVE-2026-101889

The Prime Mover plugin for WordPress (versions before 2.2.1 ) is vulnerable to a path traversal vulnerability. The issue stems from insufficient path validation within the computeExtractVariables() and validateImportedSiteVsPackage() functions. An authenticated administrator can exploit this by i...