Vulnerabilities

TI-2025-38470 CVE-2025-62148 · GHSA-7r75-q8gx-vwxv

WordPress Robots.txt rewrite plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Eugen Bobrowski Robots.txt rewrite robotstxt-rewrite allows Cross Site Request Forgery.This issue affects Robots.txt rewrite: from n/a through <= 1.6.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00119 Published 2025-12-31 No fix listed CWE-352

TI-2025-17451 CVE-2025-23684 · GHSA-8cw5-2qqr-3xvc

WordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Debug Tool: from n/a through <= 2.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2025-01-22 No fix listed CWE-862

TI-2024-35087 CVE-2024-52416 · GHSA-hg57-gjx2-c4mf

WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

MEDIUM 49

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00458 Published 2024-11-16 No fix listed CWE-862

TI-2024-09808 CVE-2024-10586 · GHSA-m3hx-38j6-phw2

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

MEDIUM 53

The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02145 Published 2024-11-09 No fix listed CWE-862

TI-2024-09810 CVE-2024-10588 · GHSA-h2c8-93q5-68fc

Debug Tool <= 2.2 - Missing Authorization to Information Exposure