Skip to content
OpenAdvisories

Vendor

stijnvanderree

1 known vulnerabilities.

Products

Laposta 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6574

    Laposta <= 1.12 - Unauthenticated Full Path Disclosure

    The Laposta plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.12. This is due to the plugin not preventing direct access to several test files. This makes it possible for unauthenticated attackers to retrieve t…

    stijnvanderree Laposta Web / CMS