Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/11/12 3:46 a.m.11 views

CVE-2025-11996

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

5.3CVSS5.3AI score0.00147EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 6:30 a.m.3 views

EUVD-2025-60967

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

5.3CVSS4.9AI score0.00147EPSS
Exploits0References5
NVD
NVD
added 2025/11/11 4:15 a.m.2 views

CVE-2025-11996

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

5.3CVSS0.00147EPSS
Exploits0References4
CVE
CVE
added 2025/11/11 3:30 a.m.11 views

CVE-2025-11996

CVE-2025-11996 affects the WordPress plugin Find Unused Images (versions up to 1.0.7). The root cause is a missing capability check in the functions fui_delete_image() and fui_delete_all_images() , allowing an unauthenticated attacker to delete all attachments on the site. The impact is data dele...

5.3CVSS5AI score0.00147EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/11/11 3:30 a.m.6 views

CVE-2025-11996 Find Unused Images <= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

5.3CVSS0.00147EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/11 3:30 a.m.2 views

CVE-2025-11996 Find Unused Images <= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

5.3CVSS5AI score0.00147EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin Find Unused Images 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00147EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.3 views

PT-2025-46268

Name of the Vulnerable Software and Affected Versions Find Unused Images plugin for WordPress versions through 1.0.7 Description The Find Unused Images plugin for WordPress is susceptible to unauthorized data loss. This is due to a missing capability check within the fui delete image and fui dele...

5.3CVSS6.2AI score0.00147EPSS
Exploits0References6
Rows per page
Query Builder