Background-image-cropper vulnerabilities
We track 1 vulnerability in Background-image-cropper products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Background-image-cropper vulnerabilities
- 9.8 Critical severity
Background Image Cropper: Unrestricted Upload of File with Dangerous Type
WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the