Skip to content
OpenAdvisories

Vendor

bww

3 known vulnerabilities.

Products

URL Image Importer 2 Big File Uploads – Increase Maximum File Upload Size 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-12138

    URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload

    The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.0.6. This is due to the plugin relying on a user-controlled Content-Type HTTP header to valida…

    bww URL Image Importer Web / CMS