Advisories · Technology
krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager.
Every CVE that names krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
- krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Featured Image Plus <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update
- krasenslavov Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager
- Broken access control