CVE-2019-14205

The CVE-2019-14205 issue affects the WordPress plugin Nevma Adaptive Images prior to 0.6.67, where an LFI could be exploited via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php to read arbitrary server files. Documented by NVD and multiple security ...

CVE-2019-14206

The Nevma Adaptive Images plugin for WordPress (versions prior to 0.6.67 ) is vulnerable to an Arbitrary File Deletion vulnerability. The root cause is unsanitized input handled via the $REQUEST['adaptive-images-settings'] parameter in the adaptive-images-script.php file. Remote attackers can exp...