Skip to content
OpenAdvisories

Vendor

bww

3 known vulnerabilities.

Products

URL Image Importer 2 Big File Uploads – Increase Maximum File Upload Size 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-14120

    URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The URL Image Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.7 due to insufficient sanitization of SVG files. This makes it possible for authenticated attackers, with A…

    bww URL Image Importer Web / CMS
  • Medium 4.3
    CVE-2024-8538

    Big File Uploads <= 2.1.2 - Authenticated (Author+) Full Path Disclosure

    The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1.2. This is due the plugin not sanitizing a file path in an error message. This makes it possible for …

    bww Big File Uploads – Increase Maximum File Upload Size Web / CMS