PT-2024-15878 · WordPress · Instant Images – One Click Image Uploads

Name of the Vulnerable Software and Affected Versions: The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress versions prior to 6.1.1 Description: The issue allows unauthorized arbitrary options update due to an insufficient check that...

Instant Images < 6.1.1 - Author+ Arbitrary Options Update

Description The plugin is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license REST API endpoint, allowing authors and higher to update arbitrary options...

CVE-2023-27451

Server-Side Request Forgery SSRF vulnerability in Darren Cooney Instant Images plugin = 5.1.0.2 versions...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Darren Cooney Instant Images plugin = 5.1.0.2 versions...

CVE-2023-27451

CVE-2023-27451: SSRF in WordPress Instant Images plugin

WordPress Plugin Instant Images Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Instant Images - One Click...

Instant Images < 5.2.0 - Author+ SSRF

The plugin does not validate a parameter before making a request to it, which could allow users with Author role and above to perform SSRF attack...

WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)

Software Instant Images Type Plugin Vulnerable versions = 5.1.0.2 Fixed in 5.2.0 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-27451 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 7950e8634dee Credits Universe Required...

The vulnerability of the `unsplash_download_w` and `unsplash_download_h` parameters in the Instant Images One Click plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the unsplashdownloadw and unsplashdownloadh parameters in the “One Click for Instant Images” plugin of the WordPress content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious...

CVE-2021-24334

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...

Cross site scripting

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Store...

CVE-2021-24334

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...

CVE-2021-24334

The CVE concerns the WordPress plugin Instant Images – One Click Unsplash Uploads,

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...

WordPress Instant Images – One Click Unsplash Uploads plugin <= 4.4.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Instant Images – One Click Unsplash Uploads plugin versions = 4.4.0. Solution Update the WordPress Instant Images – One Click Unsplash Uploads plugin to the latest available version at least 4.4.0.1...