Skip to content
OpenAdvisories

Vendor

garidium

3 known vulnerabilities.

Products

g-FFL Cockpit 2 g-FFL Checkout 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-68001 Public exploit

    WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in garidium g-FFL Checkout g-ffl-checkout allows Upload a Web Shell to a Web Server.This issue affects g-FFL Checkout: from n/a through <= 2.1.0.

    garidium g-FFL Checkout
  • Medium 5.3
    CVE-2025-12720 Public exploit

    g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

    The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization that can be spoofed in the handle_enqueue_only() function in all versions up to, and including, 1.7.1. This makes it possible for unauthent…

    garidium g-FFL Cockpit Web / CMS
  • Medium 5.3
    CVE-2025-12721 Public exploit

    g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

    The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /server_status REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attacker…

    garidium g-FFL Cockpit Web / CMS