Skip to content
OpenAdvisories

Product · eugenbobrowski

Debug Tool

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-10586 Public exploit

    Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

    The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthentica…

    eugenbobrowski Debug Tool Web / CMS