Skip to content
OpenAdvisories
High · 7.7 CVE-2025-28980 EUVD-2025-19972GHSA-r4p5-cjpr-fgvm

WordPress Aviation Weather from NOAA plugin <= 0.7.2 - Arbitrary File Deletion Vulnerability

Published Jul 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in machouinard Aviation Weather from NOAA aviation-weather-from-noaa allows Path Traversal.This issue affects Aviation Weather from NOAA: from n/a through <= 0.7.2.

Affected products

VendorProductAffectedFixed
machouinard Aviation Weather from NOAA ≤ 0.7.2 —

References