Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: aumkub Clear all filters
TI-2024-05272 CVE-2024-5677 · GHSA-h2cx-hfhg-v7g6

Featured Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload

Priority LOW 20

The Featured Image Generator plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the fig_save_after_generate_image function in all versions up to, and including, 1.3.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00332 Published 2024-07-10 No fix listed CWE-862