icret

Products

ProductCVEsExploitedLatest
EasyImages2–Nov 19, 2025
EasyImage1–Oct 26, 2026
EasyImages2.01–Oct 27, 2026
icret/easyimages2.01–Mar 5, 2023

Exploited and recent CVEs

  • CVE-2026-117566 Medium 5.3 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php 0.4%
  • CVE-2026-116223 Medium 6.5 icret EasyImage del.php privileges management 0.3%
  • CVE-2025-13415 Low 3.5 icret EasyImages SVG Image upload.php cross site scripting 0.2%
  • CVE-2023-7098 Low 3.1 icret EasyImages hide.php path traversal 0.7%
  • CVE-2023-1181 Medium 5.4 Cross-site Scripting (XSS) - Stored in icret/easyimages2.0 0.4%