CVE-2024-54291

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects PluginPass: from n/a through = 0.9.10...

CVE-2024-54291

creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9376 2025-03-28 17:37:11+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3llhe4n3ix52r 2025-03-28 17:45:32+00:00| seen|...

CVE-2024-54291

CVE-2024-54291 describes a path traversal in the WordPress PluginPass plugin (NotFound) affecting versions up to 0.9.10, enabling manipulation of web input to file system calls and enabling arbitrary file download/delete. The vulnerability is documented across multiple sources (including NVD/Red ...