Skip to content
OpenAdvisories

Vendor

wework4web

1 known vulnerabilities.

Products

Image Resizer On The Fly 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-6065

    Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion

    The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete …

    wework4web Image Resizer On The Fly Web / CMS