All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink vulnerabilities

1 known vulnerability in All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink from bPlugins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  All In One Image Viewer Block – Gutenberg…: Server-Side Request Forgery

  CVE-2026-1294Feb 5, 2026bPlugins

  The All In One Image Viewer Block plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.2 due to missing authorization and URL validation on the image-proxy REST API endpoint. This makes it possible for una