CVE-2025-12394

The Backup Migration WordPress plugin (versions before 2.0.0 ) is vulnerable to an information exposure flaw due to an improperly generated backup path in certain server configurations. This allows unauthenticated users to fetch a log that discloses the backup filename , subsequently enabling the...

The vulnerability of the setuptools project’s packaging simplification library arises from an incorrect limitation on the path to the restricted-access directory. This allows a malicious actor to compromise the vulnerable system.

The vulnerability of the setuptools project’s packaging simplification library is related to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the vulnerable system remotely...