Skip to content
OpenAdvisories

Vendor

garidium

3 known vulnerabilities.

Products

g-FFL Cockpit 2 g-FFL Checkout 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12720 Public exploit

    g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

    The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization that can be spoofed in the handle_enqueue_only() function in all versions up to, and including, 1.7.1. This makes it possible for unauthent…

    garidium g-FFL Cockpit Web / CMS
  • Medium 5.3
    CVE-2025-12721 Public exploit

    g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

    The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /server_status REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attacker…

    garidium g-FFL Cockpit Web / CMS