Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: docjojo Clear all filters
TI-2025-12253 CVE-2025-13404 · GHSA-2wrj-mx36-vgp8

Missing authorization in docjojo atec Duplicate Page & Post

Priority LOW 30

The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicate_post() function in all versions up to, and including, 1.2.20.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00277 Published 2025-11-25 No fix listed CWE-862
TI-2025-08723 CVE-2025-9518 · GHSA-29fj-mx8x-vqcg

atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion

Priority LOW 35

The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00923 Published 2025-09-04 No fix listed CWE-36