Skip to content
OpenAdvisories

Vendor

docjojo

4 known vulnerabilities.

Products

atec Debug 3 atec Duplicate Page & Post 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-9517

    atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution

    The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authen…

    docjojo atec Debug Web / CMS
  • High 7.2
    CVE-2025-9518

    atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion

    The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22. This makes it possible for authenticated attackers, with Administ…

    docjojo atec Debug Web / CMS