Codexonics Prime Mover güvenlik açıkları (CVE)

Codexonics Prime Mover için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
5.4Orta
CVE-2026-101890

Prime Mover < 2.2.1 Stored XSS via Package Metadata

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footprint.json file. Attackers can place a c…

6.5Orta
CVE-2026-101889

Prime Mover < 2.2.1 Path Traversal via wprime-config.json

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tar_root_folder values in wprime-conf…

7.2Yüksek
CVE-2026-101888

Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

Codexonics Prime Mover

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP…