Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: garidium Clear all filters
TI-2025-41610 CVE-2025-68001 · GHSA-hcj7-c9m7-w5g2

WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in garidium g-FFL Checkout g-ffl-checkout allows Upload a Web Shell to a Web Server.This issue affects g-FFL Checkout: from n/a through <= 2.1.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00652 Published 2026-01-22 No fix listed CWE-434
TI-2025-11661 CVE-2025-12720 · GHSA-ww4x-29m3-355r

g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

Priority MEDIUM 57

The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization that can be spoofed in the handle_enqueue_only() function in all versions up to, and including, 1.7.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00299 Published 2025-12-06 No fix listed CWE-285