Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: GrandPlugins Clear all filters
TI-2025-31888 CVE-2025-49973 · GHSA-xvw6-2phf-v6gr

Missing authorization in GrandPlugins Image Sizes Controller, Create Custom Image Sizes…

Priority LOW 20

Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2025-06-20 No fix listed CWE-862
TI-2024-08574 CVE-2024-9238 · GHSA-7pq2-p2r6-3h8r

AVIF & SVG Uploader <= 1.1.0 - Author+ Stored XSS via SVG Uplaod

Priority MEDIUM 58

The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 1.1.1 CWE-79