docjojo

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

docjojo records in CISA KEV

No docjojo vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-08723 CVE-2025-9518 · GHSA-29fj-mx8x-vqcg

atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion

LOW 35

The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00923 Published 2025-09-04 No fix listed CWE-36

TI-2025-08722 CVE-2025-9517 · GHSA-ff78-934g-mr6h

atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution

LOW 35

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00609 Published 2025-09-04 No fix listed CWE-94

TI-2025-12253 CVE-2025-13404 · GHSA-2wrj-mx36-vgp8

Missing authorization in docjojo atec Duplicate Page & Post

LOW 30

The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicate_post() function in all versions up to, and including, 1.2.20.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00277 Published 2025-11-25 No fix listed CWE-862

TI-2025-08721 CVE-2025-9516 · GHSA-r9cx-9cpr-wwg2

atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Read

LOW 23

The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00449 Published 2025-09-04 No fix listed CWE-36

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0