What’s Vulnerable › Products

grandplugins AVIF Uploader vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your grandplugins AVIF Uploader version is affected

Latest grandplugins AVIF Uploader vulnerabilities

• CVE-2024-9238 — AVIF & SVG Uploader <= 1.1.0 - Author+ Stored XSS via SVG Uplaod (CVSS 5.4)
• CVE-2024-9060 — AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4)