wbolt
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| IMGspider – 图片采集抓取插件 | 2 | – | Jul 4, 2024 |
| MagicPost – WordPress文章管理功能增强插件 | 1 | – | Dec 21, 2024 |
Exploited and recent CVEs
- CVE-2024-12591 MagicPost <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wb_share_social Shortcode 0.3%
- CVE-2024-6319 IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload' 0.9%
- CVE-2024-6318 IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file' 0.9%