Skip to content
OpenAdvisories

Vendor

rickardw

2 known vulnerabilities.

Products

ImageMagick Engine 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-2441

    ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution

    The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to run arbitrary commands leading to remote command execut…

    rickardw ImageMagick Engine Web / CMS
  • High 8.8
    CVE-2022-3568

    ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization

    The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted t…

    rickardw ImageMagick Engine Web / CMS