Vulnerabilidades de Cherryframework

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Cherryframework: 1 registro(s), com severidade, exploração e correções.

Cherry Framework Themes 1

Somente exploradas (KEV) →

CVE-2018-25437 Alta · 7.5 CWE-306 15/06/2026

WordPress CherryFramework Themes 3.1.4 Backup File Download

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php endpoint. Attackers can directly access the download_backup.php script in the admin/data_management directory to obtain ZIP archives containing the entire wp-content/themes directory contents.