Debug Tool vulnerabilities

2 known vulnerabilities in Debug Tool from Eugenbobrowski. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Debug Tool: Missing Authorization

  CVE-2024-52416Nov 16, 2024Eugen Bobrowski

  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.

• 9.8 Critical severity

  Debug Tool: Missing Authorization

  CVE-2024-10586Nov 9, 2024EugenbobrowskiEPSS 2.15%

  The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticat