Skip to content
OpenAdvisories

Vendor

codexonics

4 known vulnerabilities.

Products

Prime Mover 3 Prime Mover – Backup and Migration 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-101890

    Prime Mover < 2.2.1 Stored XSS via Package Metadata

    The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footprint.json file. Attackers can place a c…

    codexonics Prime Mover Web / CMS
  • Medium 6.5
    CVE-2026-101889

    Prime Mover < 2.2.1 Path Traversal via wprime-config.json

    The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tar_root_folder values in wprime-conf…

    codexonics Prime Mover Web / CMS