Known plugin vulnerabilities left unpatched for months
Known security vulnerabilities in the plugin stay unpatched for months while site owners keep it installed.
Tier II · Emerging Problems that are still building up.
7 public reports · first reported 27 September 2022 · last reported 15 December 2023
What's going wrong
Many site owners report that this WordPress image plugin had publicly listed access control and request forgery vulnerabilities that stayed open for months.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 7 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.