CVE-2019-25215

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass in versions up to and including 1.1.14 . The root cause is a lack of file access controls in nearly every file of the plugin, allowing unauthenticated attackers to call files directly. This could lead to unauthorized actio...

CVE-2020-19156

CVE-2020-19156 affects Ari Adminer v1 (WordPress plugin). An XSS flaw in the Add New Connections -> save() path via the Title parameter allows remote input handling that could lead to code execution. Root cause: insufficient input sanitization in the vulnerable component. Impact stated as XSS ...