ImageMagick Engine vulnerabilities

2 known vulnerabilities in ImageMagick Engine from Rickardw. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ImageMagick Engine: Cross-Site Request Forgery

  CVE-2022-2441Oct 20, 2023RickardwEPSS 1.09%

  The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to run arbitrary commands leading to remote command executi

• 8.8 High severity

  ImageMagick Engine: Cross-Site Request Forgery

  CVE-2022-3568Feb 10, 2023Rickardw

  The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted th