Vulnerabilities

TI-2022-20879 CVE-2022-42880 · GHSA-6c9w-hxpx-ch45

WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 27

Cross-Site Request Forgery (CSRF) vulnerability in Ali Irani Auto Upload Images plugin <= 3.3 versions allows Stored Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00216 Published 2023-06-13 No fix listed CWE-352

TI-2022-04234 CVE-2022-4633 · GHSA-v4mr-hpp4-m2rj

LOW 38

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00374 Published 2022-12-21 No fix listed CWE-352

TI-2022-04233 CVE-2022-4632 · GHSA-gh77-92x7-j48m

LOW 28

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2022-12-21 No fix listed CWE-79