IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
4.3Media

CVE-2024-30492WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability

WebToffee Import Export WordPress Users; webtoffee import_export_wordpress_users Publicada: (hace 2 años)

Descripción

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.2.

Debilidad (CWE): CWE-22

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
WebToffee Import Export WordPress Users ≤ 2.5.2

Referencias y parches

CVE recientes del mismo producto — WordPress plugins & themes

Sin puntuación
CVE-2026-127048

Lazy Blocks < 3.0.0 - Unauthenticated RCE

Custom Block Builder

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary…