wbolt

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

wbolt records in CISA KEV

No wbolt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imgspider 2 records MEDIUM All-in-one Search Automatic Push Management 1 record LOW Donate With Qrcode 1 record LOW Smart Seo Tool 1 record LOW

Records

2 records in Imgspider · all components

TI-2024-05863 CVE-2024-6319 · GHSA-fmjc-52jw-jgcm

IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'

MEDIUM 42

The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00939 Published 2024-07-04 No fix listed CWE-434

TI-2024-05862 CVE-2024-6318 · GHSA-w388-4xq6-fqmw

IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'

MEDIUM 42

The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00939 Published 2024-07-04 No fix listed CWE-434

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0