EUVD-2024-30614

Malicious code in bioql PyPI...

CVE-2024-12719

The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfuajaxactionreadsubfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level acce...

WordPress WordPress File Upload plugin <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Path Traversal vulnerability discovered by Lucio Sá in WordPress Plugin WordPress File Upload versions = 4.24.15...

PT-2024-17720 · WordPress · Wordpress File Upload

Name of the Vulnerable Software and Affected Versions: WordPress File Upload plugin versions up to, and including, 4.24.15 Description: The WordPress File Upload plugin is vulnerable to unauthorized access of data due to a missing capability check on the wfu ajax action read subfolders function...