Vendor archive

amini7 CVEs

Beta · best-effort

2 CVEs tagged to vendor amini7 — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-13544

Published Feb 11, 2025

The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the ser…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-13543

Published Feb 11, 2025

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1