Adifier System vulnerabilities

2 known vulnerabilities in Adifier System from Spoonthemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Adifier System: Unverified Password Change

  CVE-2024-13375Jan 18, 2025SpoonthemesEPSS 1.48%

  The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7. This is due to the plugin not properly validating a user's identity prior to updating their details like password th

• 7.5 High severity

  Adifier System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-49753May 17, 2024Spoonthemes

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spoonthemes Adifier System allows PHP Local File Inclusion.This issue affects Adifier System: from n/a before 3.1.4.