114 matches found
CVE-2025-22773
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...
CVE-2024-49256
Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...
CVE-2020-10114
cPanel before 84.0.20 allows stored self-XSS via the HTML file editor SEC-535...
CVE-2025-22773
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...
CVE-2025-22773
CVE-2025-22773 pertains to the WPChill Htaccess File Editor and describes an Insertion of Sensitive Information into an Externally-Accessible File or Directory vulnerability caused by incorrectly configured access controls. The issue affects Htaccess File Editor from version n/a up to 1.0.19. The...
CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...
CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...
PT-2025-4690 · Unknown · Htaccess File Editor
Name of the Vulnerable Software and Affected Versions: Htaccess File Editor versions 1.0.19 and earlier Description: The issue allows for the insertion of sensitive information into externally-accessible files or directories, exploiting incorrectly configured access control security levels...
WordPress plugin Htaccess File Editor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Htaccess File Editor versions = 1.0.19...
CVE-2024-49256
Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...
CVE-2024-49256
Incorrect Authorization vulnerability in WPChill Htaccess File Editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through 1.0.18...
CVE-2024-49256
CVE-2024-49256 - WordPress Htaccess File Editor Vulnerability type: Broken access control (Incorrect Authorization). Affected software: WPChill Htaccess File Editor (WordPress plugin) versions up to and including 1.0.18. Root cause: Authorization checks fail to properly constrain access to editor...
CVE-2024-49256 WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...
CVE-2024-49256 WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
Incorrect Authorization vulnerability in WPChill Htaccess File Editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through 1.0.18...
PT-2024-33394 · Wpchill · Wpchill Htaccess File Editor
Name of the Vulnerable Software and Affected Versions: WPChill Htaccess File Editor versions 1.0.18 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means tha...
WordPress plugin Htaccess File Editor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Htaccess File Editor versions = 1.0.18...
WordPress Htaccess File Editor Plugin <= 1.0.18 is vulnerable to Broken Access Control
Software Htaccess File Editor Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49256 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d6dd94150ebc Credits savphill Require...
GO-2022-0556 OS Command Injection in file editor in Gogs in gogs.io/gogs
OS Command Injection in file editor in Gogs in gogs.io/gogs...