plugin

External Featured Image From Bing Vulnerabilities

2 known security issues reported for the External Featured Image From Bing WordPress plugin. Most recent disclosed Oct 16, 2024.

1 high

Running External Featured Image From Bing on your site? Check whether your installed version is affected.

Scan your site free

External featured image from bing [external-featured-image-from-bing] <= 1.0.2 (unfixed + closed)

unknown

[en] Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through 1.0.2.

Affected:
up to 1.0.2
Fix:
No patched version reported
Disclosed:
Oct 16, 2024

CVE-2024-48027 on NVD →

External featured image from bing <= 1.0.2 - Authenticated (Subscriber+) Remote Code Execution

high

The External featured image from bing plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server.

CVSS:
8.8
Affected:
up to 1.0.2
Fix:
No patched version reported
Disclosed:
Oct 9, 2024

CVE-2024-48027 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database