Log in Start free

spikefinned

Products

ProductCVEsExploitedLatest
ImageMapper4–Nov 7, 2023

Exploited and recent CVEs

  • CVE-2023-5532 Medium 6.1 ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title 0.2%
  • CVE-2023-5507 Medium 6.4 ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
  • CVE-2023-5975 Medium 4.3 ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax 0.3%
  • CVE-2023-5506 Medium 5.4 ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax 0.4%