Cherry Framework Cherry Plugin Path Traversal Vulnerability

The Cherry Framework and Cherry Plugin versions prior to 1.2.7 have a path traversal vulnerability. This vulnerability arises from the lack of validation for the file parameter input, allowing for path traversal attacks. An attacker could send a GET request to...

WordPress Cherry Framework theme <= 3.1.4 - Unauthenticated Backup Download vulnerability

Unauthenticated Backup Download vulnerability discovered by ? in WordPress Theme Cherry Framework versions = 3.1.4...

Cherry Framework <= 3.1.4 - Unauthenticated Backup Download

Description The theme does not restrict access to a backup script in its data management module, allowing unauthenticated attackers to download an archive of the site's themes directory, disclosing its source and any sensitive data stored within it...

CVE-2024-22086

handlerequest in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution...