Vulnerabilities > Aeropage > Aeropage Sync FOR Airtable > 1.3.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-04-26 | CVE-2025-3914 | Unrestricted Upload of File with Dangerous Type vulnerability in Aeropage Sync for Airtable The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. | 8.8 |
| 2025-04-26 | CVE-2025-3915 | Missing Authorization vulnerability in Aeropage Sync for Airtable The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. | 4.3 |