Ffw Omgf
2 CVEs affecting Ffw Omgf. Latest disclosed: 2021-09-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24638 | Critical | 9.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path tra… |
CVE-2021-24639 | High | 8.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any… |