ludwigyou vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.4%	CVE-2026-66624WPMasterToolKit (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2026-09-17CVE Database V5CVE-2026-66624 Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions. EPSS 0.4%Vulnerability Ludwig You CWE-89	CVE Database V5	2026-09-17
Critical	9.9	EPSS 0.3%	CVE-2026-42756QuickWebP – Compress / Optimize Images & Convert WebP \| SEO Friendly (WordPress plugin) · Path Traversal Critical9.9EPSS 0.3%2026-05-27CVE Database V5CVE-2026-42756 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Convert WebP \| SEO Friendly quickwebp allows Path Traversal.This issue affects QuickWebP – Compress / Optimize Images & Convert WebP \| SEO Friendly: from n/a through <= 3.2.7. EPSS 0.3%Vulnerability Ludwig You	CVE Database V5	2026-05-27
Medium	4.3	EPSS 0.2%	CVE-2026-24388WPMasterToolKit (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24388 Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through <= 2.14.0. EPSS 0.2%Vulnerability Ludwig You	CVE Database V5	2026-01-22
Medium	5.3	EPSS 0.5%	CVE-2025-14166WPMasterToolKit (WPMTK) (WordPress plugin) · Code Injection Medium5.3EPSS 0.5%2025-12-12CVE Database V5CVE-2025-14166 The WPMasterToolKit plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.13.0. This is due to the plugin allowing Author-level users to create and execute arbitrary PHP code through the Code Snippets feature without proper capability checks. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP code on the server, leading to remote code execution, privilege escalation, and complete site compromise. EPSS 0.5%Vulnerability ludwigyou CWE-94	CVE Database V5	2025-12-12
Critical	9.1	EPSS 1.3%	CVE-2024-56249WPMasterToolKit (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 1.3%2025-01-02CVE Database V5CVE-2024-56249 Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through <= 1.13.1. EPSS 1.3%Vulnerability Ludwig You	CVE Database V5	2025-01-02
Medium	4.9	EPSS 0.5%	CVE-2024-56248WPMasterToolKit (WordPress plugin) · Path Traversal Medium4.9EPSS 0.5%2025-01-02CVE Database V5CVE-2024-56248 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Path Traversal.This issue affects WPMasterToolKit: from n/a through <= 1.13.1. EPSS 0.5%Vulnerability Ludwig You	CVE Database V5	2025-01-02

Page 1 of 1