Vulnerabilities

TI-2022-01551 CVE-2022-1683 · GHSA-5wv8-8c7g-gr98

amtyThumb <= 4.2.0 - Subscriber+ SQLi

MEDIUM 41

The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and no…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01548 Published 2022-06-06 No fix listed CWE-89

TI-2017-12524 CVE-2017-17059 · GHSA-rcmg-qqg5-w3f3

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post)…

LOW 33

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03419 Published 2017-11-29 No fix listed CWE-79

Vulnerabilities

Filters

amtyThumb <= 4.2.0 - Subscriber+ SQLi

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post)…