Vendors / Ivanm Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Ivanm records in CISA KEV No Ivanm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, and including, 1.0.1.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0054 · Published 2025-01-30 · No fix listed CWE-352
Priority MEDIUM 40
The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00244 · Published 2025-01-30 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
1 1 0 0 0
