Vulnerabilities

TI-2025-22717 CVE-2025-31554 · GHSA-qq9g-4q79-9r9h

WordPress Docxpresso plugin <= 2.6 - Arbitrary File Download vulnerability

LOW 27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in docxpresso Docxpresso docxpresso allows Absolute Path Traversal.This issue affects Docxpresso: from n/a through <= 2.6.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00485 Published 2025-04-03 No fix listed CWE-22

TI-2024-35148 CVE-2024-52477 · GHSA-46p5-2v62-6rxc

WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through <= 1.6.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2024-12-02 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Docxpresso plugin <= 2.6 - Arbitrary File Download vulnerability

WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability