Skip to content
OpenAdvisories

Vendor

Wbolt team

4 known vulnerabilities.

Products

IMGspider – 图片采集抓取插件 2 MagicPost – WordPress文章管理功能增强插件 1 WP资源下载管理 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-6319

    IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'

    The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level an…

    Wbolt team IMGspider – 图片采集抓取插件 Web / CMS
  • High 8.8
    CVE-2024-6318

    IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'

    The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor…

    Wbolt team IMGspider – 图片采集抓取插件 Web / CMS