background-image-cropper

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

background-image-cropper records in CISA KEV

No background-image-cropper vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-38432 CVE-2024-58348 · GHSA-x5xw-hc63-vrfp

WordPress Background Image Cropper 1.2 Remote Code Execution

MEDIUM 50

WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00838 Published 2026-06-08 No fix listed CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0