Butterflymedia

8 CVEs across 3 Butterflymedia products. Browse Butterflymedia vulnerabilities, severities, and proof-of-concept exploits.

Butterflymedia products with known CVEs

ProductCVEs
Butterfly Organizer4
Imagepress – Image Gallery3
Modern Design Library1
Butterflymedia CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-5842Medium6.42025-06-26The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and including, 1.1…
CVE-2024-9824Medium4.32024-10-12The ImagePress – Image Gallery plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ip_de…
CVE-2024-9778Medium4.32024-10-12The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to mis…
CVE-2024-9776Medium4.42024-10-12The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2…
CVE-2008-71812009-09-08Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_c…
CVE-2008-67002009-04-10Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) myta…
CVE-2008-63282009-02-27SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-63112009-02-27SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE…