krasenslavov
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager | 2 | – | Jul 23, 2025 |
| Block Editor Gallery Slider for WordPress – Image Slider, Gallery Carousel & Lightbox Plugin | 1 | – | Jul 18, 2025 |
Exploited and recent CVEs
- CVE-2025-5818 Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery 0.3%
- CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update 0.3%
- CVE-2025-4431 Featured Image Plus <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update 0.3%