Vulnerabilities

TI-2024-24958 CVE-2024-37454 · GHSA-g5xw-fr6p-pc5j

WordPress AWSM Team – Team Showcase Plugin plugin <= 1.3.1 - Local File Inclusion vulnerability

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AWSM Innovations AWSM Team allows Path Traversal.This issue affects AWSM Team: from n/a through 1.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00621 Published 2024-07-09 No fix listed CWE-22

TI-2023-04543 CVE-2023-4933 · GHSA-88xc-3623-x7qh

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

LOW 25

The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private att…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00654 Published 2023-10-16 Fixed in 3.4.3 CWE-552

TI-2023-09521 CVE-2023-23707 · GHSA-4fvv-j62f-2gpq

Unrestricted file upload in Awsm Innovations Embed Any Document – Embed PDF, Word…

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00384 Published 2023-03-23 No fix listed CWE-434

Vulnerabilities

Filters

WordPress AWSM Team – Team Showcase Plugin plugin <= 1.3.1 - Local File Inclusion vulnerability

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

Unrestricted file upload in Awsm Innovations Embed Any Document – Embed PDF, Word…