Aeropage Sync For Airtable
Approved changes feed: RSS · Atom
cpe:2.3:a:aeropage:aeropage_sync_for_airtable:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aeropage (2bceca5f-f92c-5106-8913-63f4a721c65f) |
|---|---|
| Product | Aeropage Sync For Airtable (f7e5c8d6-2732-54c2-aa09-c15266cbd87c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/common-repository/aeropage-sync-for-airtable |
purl2cpe | 2026-06-01 10:12:03.229210 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3915 |
vulnerable | 2026-06-08 07:23:10.134607 |
Aeropage Sync for Airtable <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
MEDIUM (4.3)
The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts.
Published: 2025-04-26T05:34:25.018Z
Updated: 2026-04-08T17:34:11.484Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3914 |
vulnerable | 2026-06-08 07:23:10.133432 |
Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
HIGH (8.8)
The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2025-04-26T05:34:24.102Z
Updated: 2026-04-08T17:13:12.020Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.