Every CVE whose affected-product data names Manual Image Crop Project Manual Image Crop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2015-9426 — CVSS 4.6 (medium): The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window…