Vendor

krasenslavov

3 known vulnerabilities.

Products

Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager 2 Block Editor Gallery Slider for WordPress – Image Slider, Gallery Carousel & Lightbox Plugin 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.5

CVE-2025-5818

Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.6 via the fip_get_image_options() function. This makes it possible for authenticated attacker…

krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager Web / CMS

Jul 23, 2025
Medium 4.3

CVE-2025-6726

Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classic_gallery_slider_options() function in all versions up to, and including, 1.1.1. This makes it possible for …

krasenslavov Block Editor Gallery Slider for WordPress – Image Slider, Gallery Carousel & Lightbox Plugin Web / CMS

Jul 18, 2025
Medium 4.3

CVE-2025-4431

Featured Image Plus <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fip_save_attach_featured function in all versions up to, and including, 1.6.4. This make…

krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager Web / CMS

May 30, 2025