Vulnerabilidades de Codexonics Prime Mover (CVE)

Registros CVE publicados para Codexonics Prime Mover, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
5.4Media
CVE-2026-101890

Prime Mover < 2.2.1 Stored XSS via Package Metadata

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footprint.json file. Attackers can place a c…

6.5Media
CVE-2026-101889

Prime Mover < 2.2.1 Path Traversal via wprime-config.json

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tar_root_folder values in wprime-conf…

7.2Alta
CVE-2026-101888

Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP…