Skip to content
OpenAdvisories

Product · Eugen Bobrowski

Debug Tool

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0

    WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

    Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.

  • Critical 9.8
    CVE-2024-10586 Public exploit

    Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

    The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthentica…