WordPress plugin
Moveto - Movers quotation and booking management tool security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical4
- High0
- Medium0
- Low0
All Moveto - Movers quotation and booking management tool vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤6.2No patch available | CVE-2024-25913 | |
| Critical9.8 | Missing Authorization to Unauthenticated Options Update ≤6.2No patch available | CVE-2024-25912 | |
| Critical9.8 | Unauthenticated SQL Injection ≤6.2No patch available | CVE-2024-25910 | |
| Critical9.8 | Unauthenticated Directory Traversal to Arbitrary File Deletion ≤6.2No patch available | CVE-2024-25911 |
- Critical9.8Unauthenticated Arbitrary File Upload
≤6.2No patch available
- Critical9.8Missing Authorization to Unauthenticated Options Update
≤6.2No patch available
- Critical9.8Unauthenticated SQL Injection
≤6.2No patch available
- Critical9.8Unauthenticated Directory Traversal to Arbitrary File Deletion
≤6.2No patch available
Moveto - Movers quotation and booking management tool: common questions
Does Moveto - Movers quotation and booking management tool have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Moveto - Movers quotation and booking management tool: 4 critical. At least one is not fixed in the latest version.
How do I check which version of Moveto - Movers quotation and booking management tool I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Moveto - Movers quotation and booking management tool vulnerability?
CVE-2024-25913, published Feb 12, 2024: MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload. Severity: Critical (CVSS 9.8).
Is any Moveto - Movers quotation and booking management tool vulnerability listed in CISA KEV?
No. None of the known Moveto - Movers quotation and booking management tool vulnerabilities is currently listed in the CISA KEV catalog.