butterflymedia
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ImagePress – Image Gallery | 3 | – | Oct 12, 2024 |
| Modern Design Library | 1 | – | Jun 26, 2025 |
Exploited and recent CVEs
- CVE-2025-5842 Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter 0.3%
- CVE-2024-9776 ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings 0.4%
- CVE-2024-9824 ImagePress - Image Gallery <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update 0.3%
- CVE-2024-9778 ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update 0.3%