Lucene search
K

4 matches found

Cvelist
Cvelist
added 2025/03/06 8:21 a.m.11 views

CVE-2024-13897 Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion

The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generatejsonpage function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and abov...

6.5CVSS0.14988EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/06 8:21 a.m.7 views

CVE-2024-13897 Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion

The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generatejsonpage function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and abov...

6.5CVSS7.9AI score0.14988EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/03/06 12:0 a.m.2 views

WordPress Moving Media Library plugin <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion vulnerability

Authenticated Administrator+ Directory Traversal to Arbitrary File Deletion vulnerability discovered by omstaendlig in WordPress Plugin Moving Media Library versions = 1.22...

6.5CVSS7AI score0.14988EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.1 views

WordPress plugin Moving Media Library 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6.5CVSS8.8AI score0.14988EPSS
Exploits0References4
Rows per page
Query Builder