Skip to content
OpenAdvisories

Vendor

background-image-cropper

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    WordPress Background Image Cropper 1.2 Remote Code Execution

    WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the…