CyberSecBulletin

Rickardw vulnerabilities

We track 2 vulnerabilities in Rickardw products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2023.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Rickardw vulnerabilities

  • 8.8 High severity

    ImageMagick Engine: Cross-Site Request Forgery

    CVE-2022-2441RickardwEPSS 1.09%

    The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to run arbitrary commands leading to remote command executi

  • 8.8 High severity

    ImageMagick Engine: Cross-Site Request Forgery

    CVE-2022-3568Rickardw

    The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted th