Wbolt vulnerabilities
We track 3 vulnerabilities in Wbolt products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2024.
Latest Wbolt vulnerabilities
- 8.8 High severity
IMGspider – 图片采集抓取插件: Unrestricted Upload of File with Dangerous Type
The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level and
- 8.8 High severity
IMGspider – 图片采集抓取插件: Unrestricted Upload of File with Dangerous Type
The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-
- 8.8 High severity
All-in-one Search Automatic Push Management: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in 闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affects 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条: from n/a through 4.2.7.