17 matches found
PT-2026-96656
Name of the Vulnerable Software and Affected Versions Image Buzz versions prior to 1.0.4 Description The Image Buzz plugin for WordPress contains missing authorization checks, allowing unauthenticated attackers to modify API keys configured by site administrators. This is achieved by manipulating...
Malicious code in unsplash-it-download (npm)
The package unsplash-it-download was found to contain malicious code...
MAL-2025-37880 Malicious code in unsplash-it-download (npm)
The package unsplash-it-download was found to contain malicious code...
CVE-2025-5818: Server-Side Request Forgery (SSRF)
The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.6 via the fipgetimageoptions function. This makes it possible for authenticated attackers, with administrator-level access and abov...
WordPress plugin Featured Image Plus – Quick & Bulk Edit with Unsplash 访问控制错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Featured...
CVE-2025-4431: Improper Access Control
The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fipsaveattachfeatured function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers...
CVE-2024-0869: Missing Authorization
The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...
The vulnerability of the `unsplash_download_w` and `unsplash_download_h` parameters in the Instant Images One Click plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.
The vulnerability of the unsplashdownloadw and unsplashdownloadh parameters in the “One Click for Instant Images” plugin of the WordPress content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious...
WordPress plugin has unspecified vulnerability (CNVD-2021-44299)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...
CVE-2021-24334
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...
CVE-2021-24334
The CVE concerns the WordPress plugin Instant Images – One Click Unsplash Uploads,
CVE-2021-24334: Improper Neutralization of Input During Web Page Generation
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...
PT-2021-3638
Name of the Vulnerable Software and Affected Versions Instant Images – One Click Unsplash Uploads WordPress plugin versions prior to 4.4.0.1 Description The issue is related to the improper validation and sanitization of the unsplash download w and unsplash download h parameter settings in the...
Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS
The plugin did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue. PoC -- Payloads: $ "...
[SECURITY] Fedora 29 Update: fondo-1.2.2-4.20190324git71d97ee.fc29
Find a variety of the most beautiful wallpapers from Unsplash.com the world =EF=BF=BD=EF=BF=BD=EF=BF=BDs most generous community of photographers. Fondo allows you to see thousands of beautiful photographs from the most re cent to the one you are to looking for. Give a simple click on a picture t...
