Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:2 a.m.9 views

CVE-2023-27451

Server-Side Request Forgery SSRF vulnerability in Darren Cooney Instant Images plugin = 5.1.0.2 versions...

8.8CVSS7AI score0.00805EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:13 p.m.9 views

CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...

8.8CVSS7AI score0.00791EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/25 1:31 p.m.6 views

WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Instant Images versions = 6.1.0...

7.2CVSS7AI score0.00512EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/02/05 10:16 p.m.7 views

CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...

6.5CVSS5.9AI score0.00791EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/22 2:15 p.m.6 views

CVE-2023-27451

Server-Side Request Forgery SSRF vulnerability in Darren Cooney Instant Images plugin = 5.1.0.2 versions...

8.8CVSS7.3AI score0.00805EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/02 12:0 a.m.9 views

The vulnerability of the `unsplash_download_w` and `unsplash_download_h` parameters in the Instant Images One Click plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the unsplashdownloadw and unsplashdownloadh parameters in the “One Click for Instant Images” plugin of the WordPress content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious...

7CVSS5.6AI score0.00659EPSS
SaveExploits2References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/01 2:15 p.m.2 views

CVE-2021-24334

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...

5.4CVSS6AI score0.00659EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.8 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...

5.4CVSS5.6AI score0.00659EPSS
SaveExploits2References2
Rows per page
Query Builder