WordPress security by component
Aeropage Sync for Airtable
Plugin description
Aeropage Sync for Airtable is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 26, 2025; the highest published CVSS base score is 8.8.
Plugin slug:
aeropage-sync-for-airtableLatest vulnerability
CVE-2025-3915: Aeropage Sync for Airtable: A security weakness
Aeropage Sync for Airtable is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Apr 26, 2025 |
CVE-2025-3915
Aeropage Sync for Airtable: A security weakness
Aeropage Sync for Airtable is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Apr 26, 2025 |
CVE-2025-3914
Aeropage Sync for Airtable: Dangerous file upload
Aeropage Sync for Airtable is affected by dangerous file upload. Exploitation requires an authenticated subscriber account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE8.8
NVD8.8
|