Vulners
Lucene search
2 matches found
CVE-2021-24154
The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd...
4.9CVSS6.9AI score0.01066EPSS
Exploits1References1
CVE-2021-24154
The Theme Editor WordPress plugin (
4.9CVSS5.2AI score0.01066EPSS
Exploits1References1Affected Software1
20