Skymoonlabs

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Skymoonlabs records in CISA KEV

No Skymoonlabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cleanto 2 records MEDIUM Moveto 2 records HIGH

Records

2 records in Moveto · all components

TI-2024-17010 CVE-2024-25910 · GHSA-6rg4-5cvm-2w3m

WordPress MoveTo Plugin <= 6.2 is vulnerable to SQL Injection

HIGH 82

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2024-02-28 No fix listed CWE-89

TI-2024-17013 CVE-2024-25913 · GHSA-p85g-mx27-m79q

WordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File Upload

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0063 Published 2024-02-26 No fix listed CWE-434

Open these records in search →

Critical	5
High	1
Medium	0
Low	0
No CVSS	0