2 matches found
PT-2026-63553
Name of the Vulnerable Software and Affected Versions Dompdf versions prior to 3.16 Description Dompdf fails to validate the dimensions of BMP images before processing them. The software relies solely on the declared header dimensions to allocate memory for the image canvas via the...
6.3CVSS5.8AI score0.00507EPSS
SaveExploits1References6
PT-2025-47429
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.3 via the 'get image size by url' function. This is due to insufficient validation of user-supplied URLs when determining image dimensions for gallery item...
5.4CVSS5.8AI score0.00233EPSS
SaveExploits0References8
20