CVE-2021-24447

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard...

Design/Logic Flaw

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard...

CVE-2021-24447

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard...

CVE-2021-24447

The CVE covers the WordPress plugin WP Image Zoom, vulnerable before version 1.47. The root cause is lack of validation of the tab parameter used in include_once(), leading to a Local File Inclusion in the admin dashboard. Public sources consistently describe a local file inclusion vulnerability,...

WordPress 路径遍历漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin WP Image Zoom has a file inclusion vulnerability in versions prior to 1.47. The vulnerability stems...

WP Image Zoom < 1.47 - Local File Inclusion

The plugin did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard PoC: https://example.com/wp-admin/admin.php?page=zoooomsettings&tab=whatever This URL shows includeonce error, which indicates that the paramet...

WordPress WP Image Zoom plugin <= 1.46 - Local File Inclusion (LFI) vulnerability

Local File Inclusion vulnerability discovered by apple502j in WordPress WP Image Zoom plugin versions = 1.46. Solution Update the WordPress WP Image Zoom plugin to the latest available version at least 1.47.1...

WP Image Zoom < 1.47 - Local File Inclusion

The plugin did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard PoC PoC: https://example.com/wp-admin/admin.php?page=zoooomsettings=whatever This URL shows includeonce error, which indicates that the paramet...

WordPress WP Image Zoom Access Control Error Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Image Zoom is used in one of the image zoom plugin. An access control error vulnerability exists in the AJAX...

CVE-2018-1000510

WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally or unintentionally via CSRF by any logged in user. This vulnerability...

CVE-2018-1000510

WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally or unintentionally via CSRF by any logged in user. This vulnerability...

CVE-2018-1000510

WP Image Zoom (WordPress plugin) version 1.23 contains an Incorrect Access Control vulnerability in the AJAX settings that allows any logged-in user to trigger a denial-of-service. The issue is triggered via CSRF and can be exploited intentionally or unintentionally; the vulnerability is mitigate...

CVE-2018-1000510

WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally or unintentionally via CSRF by any logged in user. This vulnerability...

WordPress WP Image Zoom plugin <=1.23 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Tom Adams in WordPress WP Image Zoom plugin versions =1.23. Solution Update the WordPress WP Image Zoom plugin to the latest available version at least 1.24...

WordPress WP Image Zoom 1.23 Denial Of Service

Details ================ Software: WP Image Zoom Version: 1.23 Homepage: http://wordpress.org/plugins/wp-image-zoooom/ Advisory report: https://advisories.dxw.com/advisories/wp-image-zoom-dos/ CVE: Awaiting assignment CVSS: 7.5 High; AV:N/AC:L/Au:S/C:N/I:P/A:C Description ================ WP Imag...

WordPress Image Zoom 1.23 Plugin Denial Of Service Vulnerability

Exploit for php platform in category web applications Details ================ Software: WP Image Zoom Version: 1.23 Homepage: http://wordpress.org/plugins/wp-image-zoooom/ Advisory report: https://advisories.dxw.com/advisories/wp-image-zoom-dos/ CVE: Awaiting assignment CVSS: 7.5 High;...

WP Image Zoom <= 1.23 - Cross-Site Request Forgery (CSRF)

The WP Image Zoom WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress WP Image Zoom Plugin 1.1.0 - Multiple Vulnerabilities

WP Image Zoom plugin is prone to multiple vulnerabilities that allow anybody to upload .jpg files because of affected "divimg.php" file. Solution Update the plugin...

WordPress Wp Image Zoom Plugin <= 1.0.3 - PHP Code Execution

This plugin is prone to download.php file upload PHP code execution vulnerability. Solution Update plugin...

WordPress Wp Image Zoom Plugin - SQL Injection

Because of this vulnerability, attackers can compromise the application, access or modify data. zoom.php id parameter is vulnerable. Solution Update plugin...