Greek Multi Tool Vulnerabilities

[en] Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Greek Multi Tool – Fix peralinks, accents, auto create menus and more: from n/a through 2.3.1.

Affected:

up to 2.3.2

Fixed in:

2.3.2

Disclosed:

Apr 1, 2025

CVE-2025-30797 on NVD →

The Greek Multi Tool – Ultimate Greek Language Toolkit for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.3.1

Fixed in:

2.3.2

Disclosed:

Mar 27, 2025

CVE-2025-30797 on NVD →

<p>WordPress Greek Multi Tool – Fix peralinks, accents, auto create menus and more Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)</p><p>Software: Greek Multi Tool – Fix peralinks, accents, auto create menus and more</p><p>Fixed in version 2.3.2 </p><p>Affected Version <= 2.3.1</p>

Affected:

up to 2.3.2

Fixed in:

2.3.2

Disclosed:

Mar 6, 2025

The Greek Multi Tool – Fix peralinks, accents, auto create menus and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'record_newPermalinkValue' parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unau...

CVSS:

7.2

Affected:

up to 2.3.1

Fixed in:

2.3.2

Disclosed:

Mar 5, 2025

The Greek Multi Tool &ndash; Fix peralinks, accents, auto create menus and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &#039;record_newPermalinkValue&#039; parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it p...

Affected:

up to 2.3.2

Fixed in:

2.3.2