Skip to content
OpenAdvisories

Product · Wbolt team

IMGspider – 图片采集抓取插件

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-6319

    IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'

    The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level an…

    Wbolt team IMGspider – 图片采集抓取插件 Web / CMS
  • High 8.8
    CVE-2024-6318

    IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'

    The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor…

    Wbolt team IMGspider – 图片采集抓取插件 Web / CMS