plugin

Wp Splashing Images Vulnerabilities

2 known security issues reported for the Wp Splashing Images WordPress plugin. Most recent disclosed Jan 26, 2018.

1 high 1 medium

Running Wp Splashing Images on your site? Check whether your installed version is affected.

Scan your site free

Splashing Images <= 2.1 - PHP Object Injection

high

admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object Injection attacks via crafted serialized data in the 'session' HTTP GET parameter to wp-admin/upload.p...

CVSS:
8.8
Affected:
up to 2.1
Fixed in:
2.1.1
Disclosed:
Jan 26, 2018

CVE-2018-6195 on NVD →

Splashing Images < 2.1.1 - Cross-Site Scripting

medium

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php.

CVSS:
6.1
Affected:
up to 2.1.1
Fixed in:
2.1.1
Disclosed:
Jan 26, 2018

CVE-2018-6194 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database