CVE-2023-29171

CVE-2023-29171: Unauthenticated Reflected Cross-Site Scripting in the WordPress plugin Magic Post Thumbnail (versions

CVE-2024-6724

The Generate Images WordPress plugin (also referred to as Magic Post Thumbnail ) versions before 5.2.8 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users , such as administ...

CVE-2024-43921

CVE-2024-43921 is a Reflected XSS in the Generate Images – Magic Post Thumbnail WordPress plugin, affecting versions up to 5.2.9. Root cause: improper input neutralization during web page generation. Impact: Cross-site scripting risk via user-supplied input reflected in the page. Remediation: upd...