5 matches found
PT-2025-48791
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the process status unlink function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticate...
Arbitrary file deletion
In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...
CVE-2021-36701
In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...
PT-2021-21313
Name of the Vulnerable Software and Affected Versions htmly version 2.8.1 Description The issue allows a remote attacker to delete arbitrary known files on the local host when deleting backup files, due to an Arbitrary File Deletion vulnerability. Recommendations For htmly version 2.8.1, consider...
CVE-2021-36701: Undefined Security Weakness
In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...