Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ekndev Clear all filters
TI-2025-08447 CVE-2025-9212 · GHSA-p7xm-m8r6-w77m

WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

Priority LOW 33

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wp_dispatcher_process_upload() function in all versions up to, and including, 1.2.0.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00523 Published 2025-10-03 No fix listed CWE-434
TI-2025-09683 CVE-2025-10582 · GHSA-q43r-p7x7-pc6g

WP Dispatcher <= 1.2.0 - Authenticated (Contributor+) SQL Injection

Priority MEDIUM 40

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00348 Published 2025-10-03 No fix listed CWE-89