6 matches found
EUVD-2026-53722
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...
Code injection
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
PT-2019-14048
Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.7.0 Description The issue allows for Object Injection by leveraging a valid nonce. Recommendations For versions prior to 2.7.0, update to version 2.7.0 or later to resolve the issue...
