Codexonics Prime Mover Schwachstellen (CVE)

Für Codexonics Prime Mover veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
5.4Mittel
CVE-2026-101890

Prime Mover < 2.2.1 Stored XSS via Package Metadata

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footprint.json file. Attackers can place a c…

6.5Mittel
CVE-2026-101889

Prime Mover < 2.2.1 Path Traversal via wprime-config.json

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tar_root_folder values in wprime-conf…

7.2Hoch
CVE-2026-101888

Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP…