Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: dcooney Component: Instant Images - One Click Unsplash Uploads Clear all filters
TI-2024-00802 CVE-2024-0869 · GHSA-7cgq-w654-fmv8

Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Update

Priority MEDIUM 41

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify w…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00791 Published 2024-02-05 No fix listed CWE-862
TI-2021-06626 CVE-2021-24334 · GHSA-wfh8-qv3m-93p3

Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS

Priority LOW 25

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00659 Published 2021-06-01 Fixed in 4.4.0.1 CWE-79