Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-10755

Malicious code in bioql PyPI...

8.6CVSS8.9AI score0.00459EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/05 2:19 a.m.15 views

CVE-2025-4222

The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup file...

5.9CVSS6.5AI score0.0028EPSS
Exploits0References1
NVD
NVD
added 2025/05/03 3:15 a.m.14 views

CVE-2025-4222

The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup file...

5.9CVSS0.0028EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/03 1:43 a.m.18 views

CVE-2025-4222 Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files

The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup file...

5.9CVSS0.0028EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/03 1:43 a.m.7 views

CVE-2025-4222 Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files

The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup file...

5.9CVSS6.5AI score0.0028EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/05/03 12:0 a.m.2 views

PT-2025-18936 · WordPress · Database Toolset

Name of the Vulnerable Software and Affected Versions: Database Toolset plugin for WordPress versions up to, and including, 1.8.4 Description: The issue allows unauthenticated attackers to extract sensitive data from database backup files stored in a publicly accessible location. This is possible...

5.9CVSS6.4AI score0.0028EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/05/03 12:0 a.m.1 views

WordPress plugin Database Toolset 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.9CVSS6.3AI score0.0028EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/05/02 9:2 p.m.4 views

WordPress Database Toolset plugin <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files vulnerability

Unauthenticated Sensitive Information Exposure via Backup Files vulnerability discovered by Guy Shavit in WordPress Plugin Database Toolset versions = 1.8.4...

5.9CVSS8.7AI score0.0028EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/26 9:5 a.m.6 views

CVE-2025-3065

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote co...

9.1CVSS8AI score0.03234EPSS
Exploits0References1
NVD
NVD
added 2025/04/24 9:15 a.m.6 views

CVE-2025-3065

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote co...

9.1CVSS0.03234EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/24 8:23 a.m.16 views

CVE-2025-3065 Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote co...

9.1CVSS0.03234EPSS
Exploits0References3
CVE
CVE
added 2025/04/24 8:23 a.m.69 views

CVE-2025-3065

CVE-2025-3065 affects the WordPress plugin Database Toolset (

9.1CVSS9.6AI score0.03234EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/24 8:23 a.m.4 views

CVE-2025-3065 Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote co...

9.1CVSS7.9AI score0.03234EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.2 views

PT-2025-17712 · Unknown · Database Toolset

Name of the Vulnerable Software and Affected Versions: Database Toolset plugin versions 1.8.4 and earlier Description: The issue is related to insufficient file path validation in a function, allowing unauthenticated attackers to delete arbitrary files on the server. This can lead to remote code...

9.1CVSS9.6AI score0.03234EPSS
Exploits0References13
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.2 views

WordPress plugin Database Toolset 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

9.1CVSS8.2AI score0.03234EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/13 9:12 a.m.8 views

CVE-2025-32633

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in neoslab Database Toolset database-toolset allows Path Traversal.This issue affects Database Toolset: from n/a through = 1.8.4...

8.6CVSS7.2AI score0.00459EPSS
Exploits0References1
NVD
NVD
added 2025/04/11 9:15 a.m.5 views

CVE-2025-32633

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in neoslab Database Toolset database-toolset allows Path Traversal.This issue affects Database Toolset: from n/a through = 1.8.4...

8.6CVSS0.00459EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/11 8:43 a.m.14 views

CVE-2025-32633 WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in neoslab Database Toolset database-toolset allows Path Traversal.This issue affects Database Toolset: from n/a through = 1.8.4...

8.6CVSS0.00459EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/11 8:43 a.m.5 views

CVE-2025-32633 WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in neoslab Database Toolset allows Path Traversal. This issue affects Database Toolset: from n/a through 1.8.4...

8.6CVSS6.8AI score0.00459EPSS
Exploits0References1
CVE
CVE
added 2025/04/11 8:43 a.m.54 views

CVE-2025-32633

CVE-2025-32633 concerns the WordPress plugin data stack named Database Toolset . The connected documents state an Unauthenticated Arbitrary File Deletion vulnerability impacting Database Toolset ≤ 1.8.4 . The CVE entry in the connected material is marked as Unpatched (no fix version specified) an...

8.6CVSS7.2AI score0.00459EPSS
Exploits0References1
Rows per page
Query Builder