Ari-Soft Ari Adminer
2 CVEs affecting Ari-Soft Ari Adminer. Latest disclosed: 2024-10-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25215 | High | 7.3 | 2024-10-16 | The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions… |
CVE-2020-19156 | Medium | 5.4 | 2021-09-15 | Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component… |