EUVD-2025-7957

Malicious code in bioql PyPI...

CVE-2025-4279: Unrestricted Upload of File with Dangerous Type

The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'externalimagereplacegetposts::replacepost' function in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with...

PT-2025-19761 · WordPress · External Image Replace Plugin

Name of the Vulnerable Software and Affected Versions: External image replace plugin for WordPress versions up to, and including, 1.0.8 Description: The issue is related to missing file type validation in the external image replace get posts::replace post function, allowing authenticated attacker...

WordPress plugin: Vulnerability in the code for replacing external images

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

CVE-2025-30535

Cross-Site Request Forgery CSRF vulnerability in muro External image replace external-image-replace allows Cross Site Request Forgery.This issue affects External image replace: from n/a through = 1.0.8...

CVE-2025-30535

Cross-Site Request Forgery CSRF vulnerability in muro External image replace external-image-replace allows Cross Site Request Forgery.This issue affects External image replace: from n/a through = 1.0.8...

CVE-2025-30535

CVE-2025-30535 technical details are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories.

CVE-2025-30535 WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in muro External image replace external-image-replace allows Cross Site Request Forgery.This issue affects External image replace: from n/a through = 1.0.8...

WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nabil Irawan in WordPress Plugin External image replace versions = 1.0.8...

CVE-2025-30535: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in muro External image replace external-image-replace allows Cross Site Request Forgery.This issue affects External image replace: from n/a through = 1.0.8...

PT-2025-12588

Name of the Vulnerable Software and Affected Versions muro External image replace versions n/a through 1.0.8 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the External image replace function, allowing for Cross Site Request Forgery. Recommendations For...

WordPress plugin: External image replacement vulnerability due to cross-site request forgeing

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...