Advancedplugins vulnerabilities
We track 3 vulnerabilities in Advancedplugins products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
Latest Advancedplugins vulnerabilities
- 9.8 Critical severity
reportsstatistics: Incorrect Authorization
An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module.
- 9.8 Critical severity
ultimateimagetool: Improper Access Control
An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control.
- 7.5 High severity
Ultimateimagetool: Improper Limitation of a Pathname to a Restricted Directory
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack.