CPE Details
Aeropage Sync for Airtable 1.0.4 for WordPress
1.0.4
2025-05-05
15h28 +00:00
15h28 +00:00
2025-05-05
15h28 +00:00
15h28 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:aeropage:aeropage_sync_for_airtable:1.0.4:*:*:*:*:wordpress:*:*
Informations
Vendor
aeropageProduct
aeropage_sync_for_airtableVersion
1.0.4Target Software
wordpressRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. | 4.3 |
Moyen |
||
| The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. | 8.8 |
Haute |
