CVE-2019-14205

The Nevma Adaptive Images plugin for WordPress, in versions before 0.6.67 , is vulnerable to a Local File Inclusion (LFI) vulnerability. A remote attacker can exploit this flaw by using the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php to retrieve arb...

CVE-2019-14206

The Nevma Adaptive Images plugin for WordPress (versions prior to 0.6.67 ) is vulnerable to an Arbitrary File Deletion vulnerability. The root cause is unsanitized input handled via the $REQUEST['adaptive-images-settings'] parameter in the adaptive-images-script.php file. Remote attackers can exp...