Skip to content
OpenAdvisories

Vendor

CreedAlly

3 known vulnerabilities.

Products

Bulk Featured Image 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-58819

    WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2.4.

    CreedAlly Bulk Featured Image
  • Critical 9.1
    CVE-2025-28951

    WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Upload a Web Shell to a Web Server.This issue affects Bulk Featured Image: from n/a through <= 1.2.4.

    CreedAlly Bulk Featured Image