CVE-2019-14205

The CVE-2019-14205 issue affects the WordPress plugin Nevma Adaptive Images prior to 0.6.67, where an LFI could be exploited via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php to read arbitrary server files. Documented by NVD and multiple security ...

CVE-2019-14206

The CVE-2019-14206 entry concerns Nevma Adaptive Images for WordPress (plugin) prior to 0.6.67. A vulnerability in adaptive-images-script.php allows an attacker to delete arbitrary files via unsanitized input in the adaptive-images-settings parameter, enabling remote file deletion. Impact per sou...