Vulnerabilities

TI-2025-09353 CVE-2025-10188 · GHSA-8v87-2rcq-qxgp

Cross-site request forgery in tvcnet The Hack Repair Guy's Plugin Archiver

LOW 23

The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00129 Published 2025-09-17 No fix listed CWE-352

TI-2025-09342 CVE-2025-10176 · GHSA-wj79-3628-8rxc

The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion

LOW 35

The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the prepare_items function in all versions up to, and including, 2.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00755 Published 2025-09-12 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site request forgery in tvcnet The Hack Repair Guy's Plugin Archiver

The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion