Lucene search
+L

21 matches found

Kitploit
Kitploit
•added 2026/10/03 2:51 p.m.•27 views

CVE-2024-6132

CVE-2024-6132 Pexels: Free Stock Photos = 1.2.2 - Authenticated Contributor+ Arbitrary File Upload Usage usage: CVE-2024-6132.py -h -u URL -un USERNAME -p PASSWORD -shellurl SHELLURL Pexels: Free Stock Photos = 1.2.2 - Authenticated Contributor+ Arbitrary File Upload | BY NXPLOIT - KHALED ALENAZI...

8.8CVSS6.2AI score0.01371EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-23217

Malicious code in bioql PyPI...

8.8CVSS6.3AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-43297

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00523EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:40 a.m.•14 views

CVE-2024-49227

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

8.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 2:15 p.m.•42 views

CVE-2024-49227

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/16 1:17 p.m.•56 views

CVE-2024-49227 WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/16 1:17 p.m.•15 views

CVE-2024-49227 WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS5.2AI score0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/16 1:17 p.m.•87 views

CVE-2024-49227

CVE-2024-49227 describes a PHP object injection through deserialization in the WordPress plugin “Free Stock Photos Foter” (versions

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•19 views

WordPress plugin Free Stock Photos Foter 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS7AI score0.00523EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•5 views

CVE-2024-49227: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/14 11:13 a.m.•17 views

WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Free Stock Photos Foter versions = 1.5.4...

8.8CVSS7.3AI score0.00523EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/06/19 6:15 a.m.•49 views

CVE-2024-6132

The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexelsfspimagesoptionsvalidate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level a...

8.8CVSS0.01371EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/19 5:37 a.m.•20 views

CVE-2024-6132 Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexelsfspimagesoptionsvalidate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level a...

8.8CVSS8AI score0.01371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/19 12:00 a.m.•5 views

PT-2024-37407

Name of the Vulnerable Software and Affected Versions: Pexels: Free Stock Photos plugin for WordPress versions up to, and including, 1.2.2 Description: The issue is related to arbitrary file uploads due to missing file type validation in the pexels fsp images options validate function. This allow...

8.8CVSS0.01371EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/19 12:00 a.m.•5 views

CVE-2024-6132: Unrestricted Upload of File with Dangerous Type

The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexelsfspimagesoptionsvalidate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level a...

8.8CVSS6.2AI score0.01371EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/23 12:15 p.m.•34 views

CVE-2024-25915

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

8.8CVSS5.2AI score0.00303EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/23 12:15 p.m.•53 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

3.6CVSS5.5AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/23 11:47 a.m.•120 views

CVE-2024-25915

CVE-2024-25915 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Pexels: Free Stock Photos (versions

8.8CVSS6.6AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/23 11:47 a.m.•43 views

CVE-2024-25915 WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

4.9CVSS5.5AI score0.00303EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•3 views

CVE-2024-25915: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...

8.8CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder