WordPress plugin Instant Image Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Instant Image Generator versions = 1.5.2...

WordPress Instant Image Generator Plugin <= 1.5.2 is vulnerable to Arbitrary File Upload

Software Instant Image Generator Type Plugin Vulnerable versions = 1.5.2 Fixed in 1.5.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52377 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 2ed98a98580a Credits stealthcopter Required privilege...

CVE-2024-49671

Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allows Upload a Web Shell to a Web Server.This issue affects AI Image Generator for Your Content & Featured Images – AI Postpix: from n/a...

CVE-2024-49671

CVE-2024-49671 affects the WordPress plugin AI Image Generator for Your Content & Featured Images – AI Postpix (ai-postpix) up to version 1.1.8. It is an Arbitrary File Upload vulnerability (Restricted file type) that enables an authenticated subscriber to upload a web shell to the server, potent...

CVE-2024-49671 WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allows Upload a Web Shell to a Web Server.This issue affects AI Image Generator for Your Content & Featured Images – AI Postpix: from n/a...

WordPress AI Image Generator for Your Content & Featured Images – AI Postpix Plugin <= 1.1.8 is vulnerable to Arbitrary File Upload

Software AI Image Generator for Your Content & Featured Images – AI Postpix Type Plugin Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-49671 Patch priority High CVSS severity High 9.9 Developer Claim ownership...

CVE-2024-9241

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9241 PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9241 PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9241

CVE-2024-9241 refers to the WordPress plugin PDF Image Generator, where all versions up to and including 1.5.6 are vulnerable to a reflected XSS due to improper escaping of add_query_arg in the URL. The vulnerability is exploitable by unauthenticated attackers who can lure a user to click a link,...

WordPress PDF Image Generator plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin PDF Image Generator versions = 1.5.6...

PT-2024-39514 · WordPress · Pdf Image Generator

Name of the Vulnerable Software and Affected Versions: PDF Image Generator plugin for WordPress versions up to, and including, 1.5.6 Description: The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escapi...

WordPress PDF Image Generator Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)

Software PDF Image Generator Type Plugin Vulnerable versions = 1.5.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9241 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 787de1e230e7 Credits vgo0 Required...

WordPress plugin PDF Image Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting...

Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8798 Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Featured Image Generator plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload vulnerability

Missing Authorization to Authenticated Subscriber+ Images Upload vulnerability discovered by Lucio Sá in WordPress Plugin Featured Image Generator versions = 1.3.1...

WordPress plugin Featured Image Generator security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress AI Tools - Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

Software AI Tools - Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT Type Plugin Vulnerable versions = 2.3.0 Fixed in 3.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer...