CyberSecBulletin

Docjojo vulnerabilities

We track 2 vulnerabilities in Docjojo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2025.

2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score

Latest Docjojo vulnerabilities

  • 7.2 High severity

    atec Debug: Absolute Path Traversal

    CVE-2025-9518Docjojo

    The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22. This makes it possible for authenticated attackers, with Administr

  • 7.2 High severity

    atec Debug: Improper Control of Generation of Code

    CVE-2025-9517Docjojo

    The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authent