Vendors / Securimage-wp-fixed Project Securimage-wp-fixed Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Securimage-wp-fixed Project records in CISA KEV No Securimage-wp-fixed Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 32
The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in v…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02303 · Published 2021-08-11 · No fix listed CWE-79
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00218 · Published 2023-07-11 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 0 2 0 0
