cherry_plugin vulnerabilities

CVEs whose affected-version data names the cherry_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2016-20103High· 7.5

yesterday

Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php

Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download…

▾ TwilightCherry Team · Cherry Pluginvia CVEORG