wux_blog_editor vulnerabilities

2 known vulnerabilities in wux_blog_editor from Jurre De Klijn. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wux Blog Editor: Unrestricted Upload of File with Dangerous Type

  CVE-2024-9932Oct 26, 2024JurredeklijnEPSS 38.4%

  The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to up

• 9.8 Critical severity

  Wux Blog Editor: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9931Oct 26, 2024Jurredeklijn

  The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0. This is due to missing validation on the token being supplied during the autologin through the plugin. This makes it possible for unauthent