Filtered by vendor Pixabay Images Project
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2015-1376 | 1 Pixabay Images Project | 1 Pixabay Images | 2024-11-21 | N/A |
| pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com. | ||||
| CVE-2015-1375 | 1 Pixabay Images Project | 1 Pixabay Images | 2024-11-21 | N/A |
| pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files. | ||||
| CVE-2015-1366 | 1 Pixabay Images Project | 1 Pixabay Images | 2024-11-21 | N/A |
| Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the image_user parameter. | ||||
| CVE-2015-1365 | 1 Pixabay Images Project | 1 Pixabay Images | 2024-11-21 | N/A |
| Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter. | ||||
Page 1 of 1.