Butterflymedia
8 CVEs across 3 Butterflymedia products. Browse Butterflymedia vulnerabilities, severities, and proof-of-concept exploits.
Butterflymedia products with known CVEs
Butterflymedia CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-5842 | Medium | 6.4 | 2025-06-26 | The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1… |
CVE-2024-9824 | Medium | 4.3 | 2024-10-12 | The ImagePress – Image Gallery plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ip_de… |
CVE-2024-9778 | Medium | 4.3 | 2024-10-12 | The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to mis… |
CVE-2024-9776 | Medium | 4.4 | 2024-10-12 | The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2… |
CVE-2008-7181 | | | 2009-09-08 | Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_c… |
CVE-2008-6700 | | | 2009-04-10 | Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) myta… |
CVE-2008-6328 | | | 2009-02-27 | SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2008-6311 | | | 2009-02-27 | SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE… |