tandubhai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

tandubhai records in CISA KEV

No tandubhai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-13367 CVE-2025-14629 · GHSA-73cx-qxjx-hm8p

Alchemist Ajax Upload <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Media File Deletion

LOW 30

The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the 'delete_file' function in all versions up to, and including, 1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00326 Published 2026-01-24 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0