CVE-2025-12394

The Backup Migration WordPress plugin (versions before 2.0.0 ) is vulnerable to an information exposure flaw due to improper generation of the backup path in specific server configurations. This allows unauthenticated users to access a log that reveals the backup filename , which can then be down...

setuptools Packaging Path Traversal

The vulnerability of the setuptools project’s packaging simplification library is related to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the vulnerable system remotely...