Export limit exceeded: 26203 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-52416

WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Eugenbobrowski
Products
Debug Tool
CVE-2024-10586

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Eugenbobrowski
Products
Debug Tool
CVE-2024-10588

Debug Tool <= 2.2 - Missing Authorization to Information Exposure

The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to obtain information from phpinfo(). When WP_DEBUG is enabled, this can be exploited by unauthenticated users as well.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Eugenbobrowski Wordpress
Products
Debug Tool Wordpress