WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-tag-manager
Published
2024-01-16
Title
Image Tag Manager <= 1.5 - Reflected Cross-Site Scripting via default_class
Slug
image-upload-for-bbpress
Published
2023-12-27
Title
Inline Image Upload for BBPress < 1.1.19 - Cross-Site Request Forgery via hm_bbpui_admin_page
Slug
image-upload-for-bbpress
Published
2025-03-28
Title
Inline Image Upload for BBPress < 1.1.20 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
image-vertical-reel-scroll-slideshow
Published
2023-10-18
Title
Image vertical reel scroll slideshow <= 9.2 - Admin+ Stored XSS
Slug
image-vertical-reel-scroll-slideshow
Published
2023-10-30
Title
Image vertical reel scroll slideshow < 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
image-viewer
Published
2026-02-04
Title
All In One Image Viewer Block < 1.0.3 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint
Slug
image-wall
Published
2025-03-27
Title
Image Wall < 3.1 - Reflected Cross-Site Scripting
Slug
image-wall
Published
2025-07-16
Title
Image Wall < 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-watermark
Published
2024-04-05
Title
Image Watermark < 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification
Slug
image-widget
Published
2024-11-22
Title
Image Widget < 4.4.11 - Admin+ Stored XSS
Slug
image-widget
Published
2026-03-17
Title
Image Widget < 4.4.12 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
imageboss
Published
2020-05-11
Title
ImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting
Slug
imagelinks-interactive-image-builder-lite
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
imagelinks-interactive-image-builder-lite
Published
2022-12-16
Title
ImageLinks Interactive Image Builder for WordPress < 1.5.4 - Contributor+ Stored XSS
Slug
imagelinks-interactive-image-builder-lite
Published
2023-10-29
Title
ImageLinks Interactive Image Builder < 1.6.0 - Admin+ SQLi
Slug
imagelinks-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
imagemagick-engine
Published
2022-10-18
Title
ImageMagick-Engine < 1.7.6 - Command Injection via CSRF
Slug
imagemagick-engine
Published
2023-02-09
Title
ImageMagick Engine < 1.7.6 - PHAR Deserialization via CSRF
Slug
imagemagick-engine
Published
2024-06-26
Title
ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection
Slug
imagemagick-sharpen-resized-images
Published
2024-05-17
Title
ImageMagick Sharpen Resized Images <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Subscriber+ Arbitrary Post Deletion
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Contributor+ Stored XSS
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Stored XSS via CSRF
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Settings Update via CSRF
Slug
imagements
Published
2021-04-08
Title
Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE