Eugen Bobrowski

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Eugen Bobrowski records in CISA KEV

No Eugen Bobrowski vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2024-09808 CVE-2024-10586 · GHSA-m3hx-38j6-phw2

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

MEDIUM 53

The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02145 Published 2024-11-09 No fix listed CWE-862

TI-2024-35087 CVE-2024-52416 · GHSA-hg57-gjx2-c4mf

WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

MEDIUM 49

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00458 Published 2024-11-16 No fix listed CWE-862

TI-2025-17451 CVE-2025-23684 · GHSA-8cw5-2qqr-3xvc

WordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Debug Tool: from n/a through <= 2.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2025-01-22 No fix listed CWE-862

TI-2024-09810 CVE-2024-10588 · GHSA-h2c8-93q5-68fc

Debug Tool <= 2.2 - Missing Authorization to Information Exposure

LOW 20

The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to, and including, 2.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2024-11-09 No fix listed CWE-862

TI-2025-38470 CVE-2025-62148 · GHSA-7r75-q8gx-vwxv

WordPress Robots.txt rewrite plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Eugen Bobrowski Robots.txt rewrite robotstxt-rewrite allows Cross Site Request Forgery.This issue affects Robots.txt rewrite: from n/a through <= 1.6.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00119 Published 2025-12-31 No fix listed CWE-352

Open these records in search →

Critical	2
High	0
Medium	3
Low	0
No CVSS	0