CyberSecBulletin

Thomstark vulnerabilities

We track 2 vulnerabilities in Thomstark products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Thomstark vulnerabilities

  • 7.5 High severity

    File Away: Use of a Broken or Risky Cryptographic Algorithm

    CVE-2025-2539ThomstarkEPSS 1.69%

    The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use o

  • 9.8 Critical severity

    File Away: Unrestricted Upload of File with Dangerous Type

    CVE-2025-2512Thomstark

    The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated a