Vanyukov vulnerabilities
We track 2 vulnerabilities in Vanyukov products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Vanyukov vulnerabilities
- 8.8 High severity
Offload, AI & Optimize with Cloudflare Images: Unrestricted Upload of File with Dangerous Type
The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' parameter parameter. This is due to insufficient privilege enforcement on the cf_ima
- 8.1 High severity
Market Exporter: Improper Limitation of a Pathname to a Restricted Directory
The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_files' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscrib