Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Themeeditor Subscribe
Filtered by product Theme Editor
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24154 1 Themeeditor 1 Theme Editor 2021-04-19 4.0 MEDIUM 4.9 MEDIUM
The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd