CVE-2023-29171

CVE-2023-29171: Unauthenticated Reflected Cross-Site Scripting in the WordPress plugin Magic Post Thumbnail (versions

CVE-2024-6724

The Generate Images (also referred to as Magic Post Thumbnail ) WordPress plugin, in versions before 5.2.8 , contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is a failure to sanitise and escape certain settings, which allows users with high privileges, such as administra...

CVE-2024-43921

CVE-2024-43921 is a Reflected XSS in the Generate Images – Magic Post Thumbnail WordPress plugin, affecting versions up to 5.2.9. Root cause: improper input neutralization during web page generation. Impact: Cross-site scripting risk via user-supplied input reflected in the page. Remediation: upd...