airani

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

airani records in CISA KEV

No airani vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-10426 CVE-2026-12106 · GHSA-7v2c-5xw3-f2hc

Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of <img> Tags

LOW 28

The Auto Upload Images plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the downloadImage function.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00348 Published 2026-09-18 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0