Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2025-49973Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes · Missing Authorization Medium4.3EPSS 0.3%2025-06-20CVE Database V5CVE-2025-49973 Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes: from n/a through <= 1.0.10. EPSS 0.3%Vulnerability GrandPlugins	CVE Database V5	2025-06-20
Medium	6.4	EPSS 0.4%	CVE-2024-9060AVIF Uploader · Cross-site Scripting Medium6.4EPSS 0.4%2024-10-01CVE Database V5CVE-2024-9060 The AVIF & SVG Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. EPSS 0.4%Vulnerability grandplugins #cwe-79	CVE Database V5	2024-10-01

Showing 1–2 of 2 results