WP Image Uploader vulnerabilities

2 known vulnerabilities in WP Image Uploader from Filipmedia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  WP Image Uploader: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-13720Jan 30, 2025Filipmedia

  The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, and including, 1.0.1. This makes it possible for unauthentica

• 8.1 High severity

  WP Image Uploader: Cross-Site Request Forgery

  CVE-2024-13707Jan 30, 2025Filipmedia

  The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the gky_image_uploader_main_function() function. This makes it possible