Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: katsushi-kawamori Clear all filters
TI-2024-12917 CVE-2024-13897 · GHSA-h47c-w329-qc9g

Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion

Priority LOW 31

The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generate_json_page function in all versions up to, and including, 1.22.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0096 Published 2025-03-06 No fix listed CWE-22
TI-2024-11724 CVE-2024-12637 · GHSA-5vw8-cc54-v3pg

Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure

Priority LOW 31

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00538 Published 2025-01-17 No fix listed CWE-200