Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML
mediumThe Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'image_hub_api_keys_* (6 options)' parameter. This makes it possible for authenticated attackers, with subscriber-level a...
- CVSS:
- 4.3 (Wordfence)
- Affected:
- up to 1.2.0
- Fixed in:
- 1.3.0
- Disclosed:
- Oct 15, 2026