Debug Tool
Approved changes feed: RSS · Atom
cpe:2.3:a:eugenbobrowski:debug_tool:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Eugenbobrowski (e71e429d-1ff9-5df2-a296-6f2a1dc45ea0) |
|---|---|
| Product | Debug Tool (9fade8fa-a6f3-5e14-a0d4-b1a493ed4941) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52416 |
vulnerable | 2026-06-08 06:52:15.110943 |
WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability
CRITICAL (10)
Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through <= 2.2.
Published: 2024-11-16T21:14:15.213Z
Updated: 2026-04-28T16:10:41.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10588 |
vulnerable | 2026-06-08 06:23:47.024741 |
Debug Tool <= 2.2 - Missing Authorization to Information Exposure
MEDIUM (4.3)
The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to obtain information from phpinfo(). When WP_DEBUG is enabled, this can be exploited by unauthenticated users as well.
Published: 2024-11-09T02:31:59.749Z
Updated: 2026-04-08T16:38:11.638Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10586 |
vulnerable | 2026-06-08 06:23:47.021214 |
Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
CRITICAL (9.8)
The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.
Published: 2024-11-09T02:32:01.177Z
Updated: 2026-04-08T16:56:12.645Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.