CVE-2024-6885 MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion

The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxiremovecustomimagesize and maxiaddcustomimagesize functions in all versions up to, and including, 1.9.2. This makes ...

CVE-2024-6885

CVE-2024-6885 affects MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles for WordPress. Affected versions: all

WordPress plugin MaxiBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress MaxiBlocks Plugin <= 1.9.2 is vulnerable to Arbitrary File Deletion

Software MaxiBlocks Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-6885 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 302b1ce9770d Credits Lucio Sá Required privilege...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34036)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34037)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete arbitrary files...

SolarWinds Access Rights Manager Path Traversal Vulnerability (CNVD-2024-34986)

SolarWinds Access Rights Manager is a tool for managing and monitoring user access rights. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and cause information disclosure...

PT-2024-21919 · Wmcms · Wmcms

Name of the Vulnerable Software and Affected Versions: WMCMS version 4.4 Description: An issue in the DelFile function allows attackers to delete arbitrary files via a crafted POST request. Recommendations: For WMCMS version 4.4, consider disabling the DelFile function until a patch is available ...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34035)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34038)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete arbitrary files...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

SolarWinds Access Rights Manager Path Traversal Vulnerability (CNVD-2024-34988)

SolarWinds Access Rights Manager is a tool for managing and securing user access rights in an enterprise network. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and obtain sensitive information...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability (CNVD-2024-34027)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal arbitrary file deletion vulnerability that can be exploited by an attacker to send a crafted request to...

LG Simple Editor Directory Traversal Arbitrary File Deletion Vulnerability

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal arbitrary file deletion vulnerability that can be exploited by an attacker to send a crafted request to...

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deleteTransferFile method. The...

SolarWinds Access Rights Manager AddReportResult Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AddReportResult method. The issue results from the lack of...

PT-2024-37102 · WordPress · Timeline Event History Plugin

Name of the Vulnerable Software and Affected Versions: Timeline Event History plugin for WordPress versions up to, and including, 3.1 Description: The issue allows authenticated attackers with Contributor-level access and above to inject a PHP Object via deserialization of untrusted input...

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deleteTransferFile method. The...

SolarWinds Access Rights Manager AddGeneratedReport Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AddGeneratedReport method. The issue results from the lack...