PT-2026-27863 · Designingmedia · Energo

CVE-2026-24970 · Publicado 2026-03-25 · Atualizado 2026-03-30

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Energox versions n/a through 1.2

Description An improper limitation of a pathname to a restricted directory ('Path Traversal') exists in designingmedia Energox energox, allowing Path Traversal. This allows an attacker to potentially access files and directories outside of the intended restricted directory.

Recommendations Update Energox to a version greater than 1.2.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-24970

Produtos afetados

Energo

Referências · 3

• https://patchstack.com/database/Wordpress/Theme/energox/vulnerability/wordpress-energox-theme-1-2-arbitrary-file-deletion-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-24970 · Nota de Segurança
• https://twitter.com/CVEnew/status/2038517051564888115 · Publicação no Twitter