atec Debug vulnerabilities

2 known vulnerabilities in atec Debug from Docjojo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  atec Debug: Absolute Path Traversal

  CVE-2025-9518Sep 4, 2025Docjojo

  The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22. This makes it possible for authenticated attackers, with Administr

• 7.2 High severity

  atec Debug: Improper Control of Generation of Code

  CVE-2025-9517Sep 4, 2025Docjojo

  The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authent