Vulnerabilidades de Ludwig You
CVEs publicadas que afetam produtos de Ludwig You: 3 registro(s), com severidade, exploração e correções.
WPMasterToolKit 1QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly 1WPMasterToolKit (WPMTK) – All in one plugin 1
CVE-2026-42756
Crítica · 9.9
CWE-22 27/05/2026
Plugin QuickWebP para WordPress até 3.2.7: Path Traversal com Exclusão Arbitrária de Arquivos
Limitação imprópria de um caminho para um diretório restrito ('Path Traversal') na Ludwig You QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly quickwebp permite Path Traversal. Este problema afeta QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly: desde n/a até <= 3.2.7.
CVE-2026-24388
Média · 4.3
CWE-862 22/01/2026
WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through <= 2.14.0.
CVE-2025-14166
Média · 5.3
CWE-94 12/12/2025
WPMasterToolKit (WPMTK) <= 2.13.0 - Authenticated (Contributor+) Code Injection
The WPMasterToolKit plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.13.0. This is due to the plugin allowing Author-level users to create and execute arbitrary PHP code through the Code Snippets feature without proper capability checks. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP code on the server, leading to remote code execution, privilege escalation, and complete site compromise.