Lucene search
K

13 matches found

Nuclei
Nuclei
added 19 hours ago52 views

WordPress WP01 - Path Traversal

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wp01ru WP01 allows Path Traversal. This issue affects WP01: from n/a through 2.6.2. id: CVE-2025-30567 info: name: WordPress WP01 - Path Traversal author: s4e-io severity: high description: | Improper...

7.5CVSS5.8AI score0.43807EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.5 views

WordPress WP01 - Speed, Security, SEO consultant plugin <= 2.6.2 - Authenticated (Subscriber+) Arbitrary File Download vulnerability

WordPress WP01 - Speed, Security, SEO consultant plugin = 2.6.2 - Authenticated Subscriber+ Arbitrary File Download vulnerability discovered by theviper17y in WordPress Plugin WP01 versions = 2.6.2...

6.5CVSS5.5AI score0.00093EPSS
Exploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/07/16 12:0 a.m.7 views

VulnCheck KEV: CVE-2025-30567

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

7.5CVSS5.8AI score0.43807EPSS
In wildExploits0References62
RedhatCVE
RedhatCVE
added 2025/03/27 7:40 p.m.11 views

CVE-2025-30567

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

7.5CVSS5.9AI score0.43807EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/25 6:48 p.m.166 views

CVE-2025-30567 WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...

7.5CVSS0.43807EPSS
Exploits0References1
CVE
CVE
added 2025/03/25 6:48 p.m.99 views

CVE-2025-30567

CVE-2025-30567 affects WordPress WP01 plugin versions up to 2.6.2. The vulnerability is a path traversal flaw in the ZIP generation that allows unauthenticated attackers to download arbitrary files. Remediation: upgrade to WP01 version 2.6.3 or later, which validates file paths in the archive gen...

7.5CVSS5.9AI score0.43807EPSS
In wildExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/25 12:0 a.m.4 views

PT-2025-12817 · Wp01 · Wp01

Name of the Vulnerable Software and Affected Versions: WP01 versions prior to 2.6.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in wp01ru WP01. Recommendations: For versions pri...

7.5CVSS7.3AI score0.43807EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/03/17 4:6 a.m.13 views

CVE-2025-2267

The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the makearchive function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

6.5CVSS7.4AI score0.00093EPSS
Exploits0References1
OSV
OSV
added 2025/03/15 4:15 a.m.1 views

CVE-2025-2267

The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the makearchive function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

6.5CVSS7.4AI score0.00093EPSS
Exploits0References3
NVD
NVD
added 2025/03/15 4:15 a.m.11 views

CVE-2025-2267

The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the makearchive function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

6.5CVSS0.00093EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/15 3:23 a.m.7 views

CVE-2025-2267 WP01 – Speed, Security, SEO consultant <= 2.6.2 - Authenticated (Subscriber+) Arbitrary File Download

The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the makearchive function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

6.5CVSS7.4AI score0.00093EPSS
Exploits0References3
CVE
CVE
added 2025/03/15 3:23 a.m.66 views

CVE-2025-2267

CVE-2025-2267 affects the WP01 – Speed, Security, SEO consultant WordPress plugin. The vulnerability is an Arbitrary File Download in all versions up to 2.6.2, caused by a missing capability check and insufficient restrictions on the make_archive() function. This permits authenticated attackers w...

6.5CVSS7.3AI score0.00093EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/15 3:23 a.m.17 views

CVE-2025-2267 WP01 – Speed, Security, SEO consultant <= 2.6.2 - Authenticated (Subscriber+) Arbitrary File Download

The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the makearchive function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

6.5CVSS0.00093EPSS
Exploits0References3
Rows per page
Query Builder