Vendor/product archive

ffw / omgf CVEs

Beta · best-effort

2 CVEs tagged to ffw / omgf — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ffw vendor archive

CVE-2021-24639

Published Sep 20, 2021

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2021-24638

Published Sep 20, 2021

The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1