TI-2024-36401 CVE-2024-54313 · GHSA-x9w4-cxmc-832m
WordPress FULL – Cliente plugin <= 3.1.25 - Local File Inclusion vulnerability
Priority LOW 30
Path Traversal vulnerability in FULL.
Vulnerabilities
3 records
TI-2023-03928 CVE-2023-4242 · GHSA-7rj5-723h-386q
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check
Priority LOW 21
The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization.
TI-2023-03929 CVE-2023-4243 · GHSA-f723-pfg4-v3p5
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation
Priority MEDIUM 42
The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization.