Sminozzi vulnerabilities
We track 3 vulnerabilities in Sminozzi products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 16, 2025.
Latest Sminozzi vulnerabilities
- 7.4 High severity
WP Tools: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Path Traversal.This issue affects WP Tools: from n/a through <= 5.18.
- 7.2 High severity
Database Backup and Table Integrity Check with…: Improper Limitation of a Pathname to a Restricted Directory
The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'database_backup_ajax_delete' function in all versions up to, and including, 2.35.
- 7.2 High severity
Database Backup and Table Integrity Check with…: Exposure of Sensitive Information to an Unauthorized Actor
The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the /dashboard/backup.php file. This makes it possible for authenticated atta