Lucene search
K

10 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in unsplash-it-download (npm)

The package unsplash-it-download was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-37880 Malicious code in unsplash-it-download (npm)

The package unsplash-it-download was found to contain malicious code...

7.2AI score
Exploits0
CNNVD
CNNVD
added 2025/05/30 12:0 a.m.2 views

WordPress plugin Featured Image Plus – Quick & Bulk Edit with Unsplash 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Featured...

4.3CVSS4.7AI score0.00198EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/08/02 12:0 a.m.2 views

The vulnerability of the `unsplash_download_w` and `unsplash_download_h` parameters in the Instant Images One Click plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the unsplashdownloadw and unsplashdownloadh parameters in the “One Click for Instant Images” plugin of the WordPress content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious...

7CVSS0.00162EPSS
Exploits2References5Affected Software1
CNVD
CNVD
added 2021/06/06 12:0 a.m.8 views

WordPress plugin has unspecified vulnerability (CNVD-2021-44299)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...

5.4CVSS6.5AI score0.00162EPSS
Exploits2References1
CVE
CVE
added 2021/06/01 11:33 a.m.60 views

CVE-2021-24334

The CVE concerns the WordPress plugin Instant Images – One Click Unsplash Uploads,

5.4CVSS5.3AI score0.00162EPSS
Exploits2References2Affected Software1
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.4 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...

5.4CVSS5.6AI score0.00162EPSS
Exploits2References2
WPVulnDB
WPVulnDB
added 2021/05/17 12:0 a.m.18 views

Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS

The plugin did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue. PoC -- Payloads: $ "...

5.4CVSS1.1AI score0.00162EPSS
Exploits2References1Affected Software1
Fedora
Fedora
added 2019/04/22 5:11 a.m.13 views

[SECURITY] Fedora 29 Update: fondo-1.2.2-4.20190324git71d97ee.fc29

Find a variety of the most beautiful wallpapers from Unsplash.com the world =EF=BF=BD=EF=BF=BD=EF=BF=BDs most generous community of photographers. Fondo allows you to see thousands of beautiful photographs from the most re cent to the one you are to looking for. Give a simple click on a picture t...

3.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/11/01 6:31 a.m.14 views

unsplash.com XSS vulnerability

Vulnerable URL: https://unsplash.com/new?sortby=latest'alert/OPENBUGBOUNTY/...

6.9AI score
Exploits0
Rows per page
Query Builder