VendorsImageMapper Projectimagemapperany version
Vulnerabilities

ImageMapper Project ImageMapper 1.2.6 for WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-5507
ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-11-07 · Modified
6.4EPSS 0.004
CVE-2023-5532
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title
Published 2023-11-07 · Modified
6.1EPSS 0.002
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Published 2023-11-07 · Modified
5.4EPSS 0.004
CVE-2023-5975
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax
Published 2023-11-07 · Modified
4.3EPSS 0.003