Read the docs

CreedAlly

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CreedAlly records in CISA KEV

No CreedAlly vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-36472 CVE-2025-58819 · GHSA-hhxg-p2pm-f9gr

WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00343 Published 2025-09-05 No fix listed CWE-434
TI-2025-20894 CVE-2025-28951 · GHSA-2m2x-qh8q-wgqq

WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0038 Published 2025-07-04 No fix listed CWE-434
TI-2025-30088 CVE-2025-47591 · GHSA-4623-789q-gq79

WordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Featured Image: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00389 Published 2025-05-07 No fix listed CWE-862
Open these records in search →