Bww Url Image Importer
2 CVEs affecting Bww Url Image Importer. Latest disclosed: 2026-01-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12138 | High | 8.8 | 2025-11-21 | The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and includi… |
CVE-2025-14120 | Medium | 6.4 | 2026-01-06 | The URL Image Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.7 due t… |