Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: renehermi Clear all filters
TI-2024-03182 CVE-2024-3412

WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload

Priority MEDIUM 41

The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpstg_processing AJAX action in all versions up to…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00781 Published 2024-05-29 No fix listed CWE-434
TI-2024-03436 CVE-2024-3682 · GHSA-q66w-qfxv-vpx3

WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File

Priority LOW 25

The WP STAGING and WP STAGING Pro plugins for WordPress are vulnerable to Sensitive Information Exposure in versions up to, and including, 3.4.3, and versions up to, and including, 5.4.3, respectively, via the ajaxSendRe…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00581 Published 2024-04-26 No fix listed CWE-200