WordPress security by component
Video Downloader For Tiktok
Plugin description
Video Downloader For Tiktok is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 07, 2021; the highest CVE/CNA score is 9.8.
Plugin slug:
video-downloader-for-tiktokLatest vulnerability
CVE-2020-24143: Video Downloader For Tiktok: Filesystem traversal
Video Downloader For Tiktok is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
| Safe version |
|
||
|---|---|---|---|
| Jul 07, 2021 |
CVE-2020-24143
Video Downloader For Tiktok: Filesystem traversal
Video Downloader For Tiktok is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVD7.5
|
| Jul 07, 2021 |
CVE-2020-24142
Video Downloader For Tiktok: Server-side request forgery
Video Downloader For Tiktok is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE9.8
NVD9.8
|