Filtered by vendor Pixabay Images Project Subscriptions
Filtered by product Pixabay Images Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-1375 1 Pixabay Images Project 1 Pixabay Images 2024-08-06 N/A
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.
CVE-2015-1366 1 Pixabay Images Project 1 Pixabay Images 2024-08-06 N/A
Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the image_user parameter.
CVE-2015-1376 1 Pixabay Images Project 1 Pixabay Images 2024-08-06 N/A
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.
CVE-2015-1365 1 Pixabay Images Project 1 Pixabay Images 2024-08-06 N/A
Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter.