Amtythumb Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Amtythumb Project records in CISA KEV

No Amtythumb Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Amtythumb 2 records MEDIUM

Records

2 records

TI-2022-01551 CVE-2022-1683 · GHSA-5wv8-8c7g-gr98

amtyThumb <= 4.2.0 - Subscriber+ SQLi

MEDIUM 41

The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and no…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01548 Published 2022-06-06 No fix listed CWE-89

TI-2017-12524 CVE-2017-17059 · GHSA-rcmg-qqg5-w3f3

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post)…

LOW 33

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03419 Published 2017-11-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0