Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: shazahm1hotmailcom Clear all filters
TI-2024-11941 CVE-2024-12885 · GHSA-gwmg-6pqg-9h9j

Connections Business Directory <= 10.4.66 - Authenticated (Admin+) Arbitrary Directory Deletion

Priority LOW 30

The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and includ…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00595 Published 2025-01-25 No fix listed CWE-22