DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
criticalThe DigiWidgets Image Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10. This makes it possible for unauthenticated attackers to execute code on the server.
- CVSS:
- 9.8
- Affected:
- up to 1.10
- Fix:
- No patched version reported
- Disclosed:
- Apr 1, 2025