Read the docs

krasenslavov

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

krasenslavov records in CISA KEV

No krasenslavov vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Featured Image Plus 1 record LOW

Records

3 records

TI-2025-05246 CVE-2025-5818 · GHSA-66j9-wjfw-882m

Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery

Priority LOW 25

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.6 via the fip_get_image_options() function.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00298 Published 2025-07-23 No fix listed CWE-918
TI-2025-06109 CVE-2025-6726 · GHSA-xmhh-mj7p-f593

Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

Priority LOW 20

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classic_gallery_slider_options() function in all versions up to, and includ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00276 Published 2025-07-18 No fix listed CWE-862
TI-2025-03951 CVE-2025-4431 · GHSA-v9mc-4jxq-vw83

Featured Image Plus <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update

Priority LOW 20

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fip_save_attach_featured function in all versions…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00307 Published 2025-05-30 No fix listed CWE-284
Open these records in search →