Softaculous vulnerabilities
46 CVEs and advisories name Softaculous as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-24622Softaculous Webuzo Password Reset Command Injection
- CVE-2024-24623Softaculous Webuzo FTP Management Command Injection
- CVE-2024-24621Softaculous Webuzo Authentication Bypass
- CVE-2024-5599FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
- CVE-2024-2324FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
- CVE-2024-2504Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes
- CVE-2024-2294Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
- CVE-2024-2127Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
- CVE-2024-1590Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
- CVE-2024-0842Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
- CVE-2024-0697Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
- CVE-2023-6598SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update
- CVE-2023-6738PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields
- CVE-2023-41854WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45079WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45084WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)