Prime Mover Vulnerabilities

The Migrate WordPress Website & Backups – Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the 'prime-mover-export-files/1/' folder. This makes it possible for unauthenticated attackers to extract sensitive data includi...

CVSS:

7.5

Affected:

up to 1.9.2

Fixed in:

1.9.3

Disclosed:

Nov 24, 2023

CVE-2023-6505 on NVD →

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. An...

CVSS:

6.3

Affected:

up to 1.5.0

Fixed in:

1.5.0

Disclosed:

Mar 4, 2022

CVE-2022-4974 on NVD →