aeropage

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

aeropage records in CISA KEV

No aeropage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aeropage Sync For Airtable 2 records MEDIUM

Records

2 records

TI-2025-03460 CVE-2025-3914 · GHSA-xf25-83cp-2q6v

Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

MEDIUM 57

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17361 Published 2025-04-26 No fix listed CWE-434

TI-2025-03461 CVE-2025-3915 · GHSA-q5h6-hwf9-q8q9

Aeropage Sync for Airtable <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

LOW 20

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-04-26 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0