Wshberlin vulnerabilities
We track 3 vulnerabilities in Wshberlin products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2024.
Latest Wshberlin vulnerabilities
- 9.8 Critical severity
Startklar Elementor Addons: Improper Limitation of a Pathname to a Restricted Directory
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary file
- 9.1 Critical severity
Startklar Elementor Addons: Improper Limitation of a Pathname to a Restricted Directory
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possib
- 9.8 Critical severity
Startklar Elementor Addons: Unrestricted Upload of File with Dangerous Type
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it