CVE-2022-4632

CVE-2022-4632 affects Auto Upload Images up to version 3.3.0. It describes a cross-site scripting flaw in an unknown functionality that can be triggered remotely (attack vector: NETWORK) with user interaction required and no privileges. Upgrading to version 3.3.1 fixes the issue (patch identifier...

CVE-2022-4633 Auto Upload Images Settings setting-page.php cross-site request forgery

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4632 Auto Upload Images cross site scripting

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

CVE-2022-4632 Auto Upload Images cross site scripting

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

CVE-2022-4633 Auto Upload Images Settings setting-page.php cross-site request forgery

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

Auto Upload Images 跨站脚本漏洞

Auto Upload Images is designed to automatically detect external images in post content and import the images into your site and add them to the media library. A cross-site scripting vulnerability exists in Auto Upload Images version 3.3.1, which stems from its unknown function that allows an...

Auto Upload Images 跨站请求伪造漏洞

Auto Upload Images is designed to automatically detect external images in post content and import the images into your site and add them to the media library. A cross-site request forgery vulnerability exists in Auto Upload Images version 3.3.1, which stems from some unknown functions in the...

PT-2022-27812 · Unknown · Auto Upload Images

Name of the Vulnerable Software and Affected Versions: Auto Upload Images versions up to 3.3.0 Description: A vulnerability has been found in the affected software, classified as problematic. The manipulation leads to cross site scripting. The attack can be launched remotely. Recommendations: For...

PT-2022-27822 · Unknown · Auto Upload Images

Name of the Vulnerable Software and Affected Versions: Auto Upload Images versions up to 3.3.0 Description: A vulnerability was found in the file src/setting-page.php of the component Settings Handler, leading to cross-site request forgery. The attack may be launched remotely. Recommendations: Fo...

CVE-2022-4633

CVE-2022-4633 affects Auto Upload Images up to version 3.3.0. The vulnerability resides in the file src/setting-page.php of the Settings Handler, enabling cross-site request forgery (CSRF). The attack may be launched remotely. A fix is available in version 3.3.1; apply the upgrade (patch identifi...

WordPress Auto Upload Images plugin <= 3.3 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Rasi Patchstack Alliance in the WordPress Auto Upload Images plugin versions = 3.3. Solution No patched version is available. No reply from the vendor...