Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Bogdan Bendziukov Clear all filters
TI-2026-24943 CVE-2026-32415 · GHSA-9cmf-qgf8-jfxf

WordPress Squeeze plugin <= 1.7.7 - Directory Traversal vulnerability

Priority LOW 23

Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00294 Published 2026-03-13 No fix listed CWE-35
TI-2025-30561 CVE-2025-48235 · GHSA-mrm5-rcc3-c57j

WordPress WP Image Mask plugin <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bogdan Bendziukov WP Image Mask wp-image-mask allows DOM-Based XSS.This issue affects WP Image Mask: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-05-19 No fix listed CWE-79
TI-2025-22272 CVE-2025-31002 · GHSA-3rm8-xf73-cj38

WordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze squeeze allows Using Malicious Files.This issue affects Squeeze: from n/a through <= 1.6.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00683 Published 2025-04-09 No fix listed CWE-434
TI-2025-22273 CVE-2025-31003 · GHSA-px88-f2h5-pcx3

WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Priority LOW 14

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through <= 1.6.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00532 Published 2025-04-09 No fix listed CWE-497