Vulnerabilidades de danbilabs (CVE)

Registros CVE publicados para danbilabs, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

8.8Alta

CVE-2026-116624 hace 5 días

Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form

danbilabs Advanced Members for ACF

The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-password]` shortcode form submission. This…

8.8Alta

CVE-2026-3243 hace 7 meses

Advanced Members for ACF <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal

danbilabs Advanced Members for ACF

The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1.2.5. This makes it possible for authenticated attackers, wi…