309 matches found
WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Auto Featured Image Auto Post Thumbnail versions = 4.1.2...
WordPress Auto Featured Image (Auto Post Thumbnail) Plugin <= 4.1.2 is vulnerable to Broken Access Control
Software Auto Featured Image Auto Post Thumbnail Type Plugin Vulnerable versions = 4.1.2 Fixed in 4.1.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38719 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 17fc0a0c63f8 Credits Joshu...
WordPress Featured Image Generator plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload vulnerability
Missing Authorization to Authenticated Subscriber+ Images Upload vulnerability discovered by Lucio Sá in WordPress Plugin Featured Image Generator versions = 1.3.1...
WordPress plugin Featured Image Generator security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-5441
The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimage function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, with subscriber access and above, to uploa...
VulnCheck KEV: CVE-2024-5441
The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimage function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, with subscriber access and above, to...
WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Featured Image from URL versions = 4.8.2...
WordPress Featured Image from URL Plugin <= 4.8.2 is vulnerable to Broken Access Control
Software Featured Image from URL Type Plugin Vulnerable versions = 4.8.2 Fixed in 4.8.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37516 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 819896bb0ba3 Credits Rafie Muhammad...
WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Featured Image from URL versions = 4.8.1...
WordPress Featured Image from URL Plugin <= 4.8.1 is vulnerable to Broken Access Control
Software Featured Image from URL Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37276 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cc8f54a6d149 Credits Rafie Muhammad...
CVE-2024-6054
The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'createpostattachmentfromurl' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above...
CVE-2024-6054
The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'createpostattachmentfromurl' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above...
WordPress Plugin Auto Featured Image Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Auto Featured Image 1.2 an...
WordPress Auto Featured Image plugin <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload vulnerability
Authenticated Contributor+ Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Auto Featured Image versions = 1.2...
WordPress Auto Featured Image Plugin <= 1.2 is vulnerable to Arbitrary File Upload
Software Auto Featured Image Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-6054 Patch priority Low CVSS severity Low 9.9 Developer Claim ownership PSID 82feedc389d9 Credits István Márton Required privilege Contribut...
CVE-2023-7073
The Auto Featured Image Auto Post Thumbnail plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.0 via the uploadtolibrary AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web reques...
CVE-2023-7073 Auto Featured Image (Auto Post Thumbnail) <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery
The Auto Featured Image Auto Post Thumbnail plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.7 via the uploadtolibrary AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web reques...
WordPress plugin Auto Featured Image security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress All-in-One Video Gallery plugin <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image vulnerability
Authenticated Contributor+ Arbitrary File Upload via featured image vulnerability discovered by stealthcopter in WordPress Plugin All-in-One Video Gallery versions = 3.6.4...