EUVD-2026-27303

The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the uploadicons function workflow using a user-controlled upload path mfn-icon-upload in a filesystem move operation without constraining it to the uploads directory. Th...

CVE-2026-6262

The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the uploadicons function workflow using a user-controlled upload path mfn-icon-upload in a filesystem move operation without constraining it to the uploads directory. Th...

CVE-2026-6262

The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the uploadicons function workflow using a user-controlled upload path mfn-icon-upload in a filesystem move operation without constraining it to the uploads directory. Th...

Archer Platform security vulnerabilities

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09 that stems from being affected by an authorization bypass vulnerability that could be exploited by a remote, unprivileged attacker to...

PT-2024-33347 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.08 Description: The issue is related to an API authorization bypass vulnerability, specifically concerning the support for application files. This could allow a remote unprivileged attacker to...

PT-2024-37530

Name of the Vulnerable Software and Affected Versions: Attachment File Icons plugin for WordPress versions up to, and including, 1.3 Description: The issue is due to missing nonce validation in the afi overview function and missing file type validation in the upload icons function, making it...