Spikefinned Imagemapper
4 CVEs affecting Spikefinned Imagemapper. Latest disclosed: 2023-11-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5507 | Medium | 6.4 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'imagemap' shortcode in versions up to, and including, 1.2.6 due to insuf… |
CVE-2023-5532 | Medium | 6.1 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect n… |
CVE-2023-5506 | Medium | 5.4 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'imgmap_delete_area_ajax' function in… |
CVE-2023-5975 | Medium | 4.3 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect n… |