adaptive_images 漏洞

高危CVE-2019-142062026/01/30

Nevma Adaptive Images - Arbitrary File Deletion

Nevma Adaptive Images plugin before 0.6.67 for WordPress contains an arbitrary file deletion caused by unsanitized input in adaptive-images-script.php, letting remote attackers delete arbitrary files, exploit requires sending specific request parameters.

adaptive_imagesPoC 已收录

CVSS—

高危2023/10/20

WordPress Adaptive Images < 0.6.69 - Cross-Site Scripting

WordPress Adaptive Images < 0.6.69 is susceptible to cross-site scripting because the plugin does not sanitize and escape the REQUEST_URI before outputting it back in a page.

adaptive_imagesPoC 已收录

CVSS7.2

高危CVE-2019-142052019/07/21

WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion

WordPress Nevma Adaptive Images plugin before 0.6.67 allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php.

adaptive_imagesPoC 已收录

CVSS7.5EPSS 68.0%

adaptive_images

关联漏洞

Nevma Adaptive Images - Arbitrary File Deletion

WordPress Adaptive Images < 0.6.69 - Cross-Site Scripting

WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion