Archive
26 April 2025
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.8
Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated a…