Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Codexonics Prime Mover 2.2.1 Clear all filters
TI-2026-65197 CVE-2026-101890 · GHSA-rpr7-hhq5-32r7

Prime Mover < 2.2.1 Stored XSS via Package Metadata

Priority LOW 22

The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footp…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00163 Published 2026-10-01 Fixed in 2.2.1 CWE-79
TI-2026-65196 CVE-2026-101889 · GHSA-73vx-gw2c-25gg

Prime Mover < 2.2.1 Path Traversal via wprime-config.json

Priority LOW 31

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulate…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00335 Published 2026-10-01 Fixed in 2.2.1 CWE-22
TI-2026-65195 CVE-2026-101888 · GHSA-53gh-jq4p-v6wx

Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

Priority MEDIUM 40

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migrat…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00573 Published 2026-10-01 Fixed in 2.2.1 CWE-22