What’s Vulnerable › Products

spikefinned ImageMapper vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your spikefinned ImageMapper version is affected

Latest spikefinned ImageMapper vulnerabilities

• CVE-2023-5975 — ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax (CVSS 4.3)
• CVE-2023-5532 — ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title (CVSS 4.3)
• CVE-2023-5507 — ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-5506 — ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax (CVSS 4.3)