Skip to content
OpenAdvisories

Vendor

revmakx

19 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8856 Public exploit Scanner template EPSS 94%

    Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

    The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. Th…

  • High 7.5
    CVE-2023-2916 Public exploit EPSS 24%

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract s…