Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2025/12/21 3:20 a.m.1 views

CVE-2025-12654 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory creation in all versions up to, and including, 0.9.120. This is due to the checkfilesystempermissions function not properly restricting the directories that can be created, or in...

2.7CVSS5.6AI score0.00382EPSS
Exploits2References6
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.1 views

WordPress plugin Migration, Backup, Staging – WPvivid Backup & Migration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

2.7CVSS6.4AI score0.00382EPSS
Exploits2References7
RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.2 views

CVE-2024-20886

Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory...

6.2CVSS6.9AI score0.0017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.3 views

CVE-2023-0467

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing...

4.3CVSS6AI score0.00678EPSS
Exploits2References1
OSV
OSV
added 2024/06/27 7:15 a.m.1 views

UBUNTU-CVE-2024-22231

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master...

5CVSS5.9AI score0.00693EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/05 12:0 a.m.2 views

PT-2023-25084 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An improper resource allocation issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to the creati...

4.3CVSS5.5AI score0.00652EPSS
Exploits1References7
Rows per page
Query Builder