pjgalbraith

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

pjgalbraith records in CISA KEV

No pjgalbraith vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-05710 CVE-2024-6161 · GHSA-mxrj-q6g7-35jr

Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload

MEDIUM 41

The Default Thumbnail Plus plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'get_cache_image' function in all versions up to, and including, 1.0.2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00786 Published 2024-07-09 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0