Skip to content

Vendor

scribu vulnerabilities

1 published CVE affecting scribu, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of scribu alerts

Products

Latest scribu CVEs

Newest publication first

  1. CVE-2012-10019 Front-end Editor < 2.3 - Arbitrary File Upload

    Published
    CriticalCVSS 9.8 EPSS 3.8% Framework module

    The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.