295311 matches found
PT-2026-134020
TuxCare rebuilt @babel/plugin-proposal-optional-catch-binding to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-133879
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.24.5-tuxcare.2...
PT-2026-134294
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133928
TuxCare rebuilt @babel/plugin-transform-arrow-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133413
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133855
TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
VulnCheck KEV: CVE-2016-20103
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
VulnCheck KEV: CVE-2016-20101
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...
VulnCheck KEV: CVE-2012-20004
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to...
PT-2026-133905
TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-133945
TuxCare rebuilt @babel/plugin-transform-literals to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133225
TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133877
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133882
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-133936
TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-134115
TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-134356
TuxCare rebuilt @babel/plugin-transform-async-generator-functions to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CVE-2016-20103: Improper Limitation of a Pathname to a Restricted Directory
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...