bww
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| URL Image Importer | 2 | – | Jan 6, 2026 |
| Big File Uploads – Increase Maximum File Upload Size | 1 | – | Sep 7, 2024 |
Exploited and recent CVEs
- CVE-2025-14120 URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.2%
- CVE-2025-12138 URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload 0.7%
- CVE-2024-8538 Big File Uploads <= 2.1.2 - Authenticated (Author+) Full Path Disclosure 0.6%