The Prime Mover plugin for WordPress before version 2.2.1 has multiple security vulnerabilities that allow attackers to exploit the system.

🚨 EUVD-2026-90913 📊 Score: 7.0/10 (CVSS v3.1) 📦 Product: Prime Mover 🏢 Vendor: codexonics 📅 Updated: 2026-10-01 📝 The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tar_root_folder values in wpr... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90913 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90917 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: Prime Mover 🏢 Vendor: codexonics 📅 Updated: 2026-10-01 📝 The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site_title value in a package's footprint.json file. Attackers can p... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90917 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90911 📊 Score: 8.6/10 (CVSS v3.1) 📦 Product: Prime Mover 🏢 Vendor: codexonics 📅 Updated: 2026-10-01 📝 The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90911 #cybersecurity #infosec #euvd #cve #vulnerability