Vulnerabilities

TI-2019-15269 CVE-2019-25215 · GHSA-h2c6-h57g-w59g

ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions

LOW 38

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00413 Published 2024-10-16 No fix listed CWE-862

TI-2020-13544 CVE-2020-19156 · GHSA-g278-j36h-xmv9

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary…

LOW 26

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save()' function is called.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00853 Published 2021-09-15 No fix listed CWE-79

Vulnerabilities

Filters

ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary…