Approved changes feed: RSS · Atom
cpe:2.3:a:ffw:omgf:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Ffw (b4931cc6-a624-58c2-906a-d26fbd830768) |
|---|---|
| Product | Omgf (d6de3ad8-6ec8-59b3-bff8-6c8595aa5a3f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24639 |
vulnerable | 2026-06-08 05:30:38.920826 |
OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.
Published: 2021-09-20T10:06:45.000Z
Updated: 2024-08-03T19:35:20.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24638 |
vulnerable | 2026-06-08 05:30:38.920296 |
OMGF < 4.5.4 - Unauthenticated Path Traversal in REST API
The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file with Google Fonts CSS, or download fonts uploaded on Google Fonts website.
Published: 2021-09-20T10:06:43.000Z
Updated: 2024-08-03T19:35:20.317Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.