Orangelab Imagemagick Engine — known CVE vulnerabilities

Every CVE whose affected-product data names Orangelab Imagemagick Engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-2441 — CVSS 8.8 (high): The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to, and…
• CVE-2022-3568 — CVSS 8.8 (high): The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up…
• CVE-2024-6486 — CVSS 7.2 (high): The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the…