Skip to content
OpenAdvisories

Vendor

thebaldfatguy

1 known vulnerabilities.

Products

BFG Tools – Extension Zipper 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2025-13681

    BFG Tools – Extension Zipper <= 1.0.7 - Authenticated (Administrator+) Path Traversal via 'first_file' Parameter

    The BFG Tools – Extension Zipper plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.7. This is due to insufficient input validation on the user-supplied `first_file` parameter in the `zip()` function. This makes it …

    thebaldfatguy BFG Tools – Extension Zipper Web / CMS