← Back

Seur Oficial Project

seur_oficial_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Seur Oficial
seur_oficial
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-25004
1Seur Oficial Project
1Seur Oficial
Jun 17, 2026
Feb 7, 2022
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction aft...Show more
The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin settings page.Show less
CVE-2021-25005
1Seur Oficial Project
1Seur Oficial
Jun 17, 2026
Jan 17, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowe...Show more
The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowedShow less