Dimdavid File Provider
2 CVEs affecting Dimdavid File Provider. Latest disclosed: 2025-06-04. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4578 | Critical | 9.8 | 2025-06-04 | The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availa… |
CVE-2025-4580 | Medium | 4.3 | 2025-06-04 | The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in… |