neoslab

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

neoslab records in CISA KEV

No neoslab vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-02677 CVE-2025-3065 · GHSA-3jmr-84q9-rpjf

Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion

MEDIUM 47

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01128 Published 2025-04-24 No fix listed CWE-22

TI-2025-23698 CVE-2025-32633 · GHSA-7cqj-6r5p-jp63

WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in neoslab Database Toolset database-toolset allows Path Traversal.This issue affects Database Toolset: from n/a through <= 1.8…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0081 Published 2025-04-11 No fix listed CWE-22

TI-2025-03755 CVE-2025-4222 · GHSA-w988-x7hh-qmg5

Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files

LOW 27

The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00477 Published 2025-05-03 No fix listed CWE-200

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0