Securimage-WP-Fixed Vulnerabilities and Affected Products
Vulnerabilities associated with Securimage-WP-Fixed.
Products
Clear product- Securimage-WP-Fixed1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-34640MEDIUM | Securimage-WP-Fixed <= 3.5.4 Reflected Cross-Site ScriptingThe Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4. | CVSS6.1v3.1 | EPSS2.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |