Securimage-wp-fixed Project Securimage-wp-fixed — known CVE vulnerabilities

Every CVE whose affected-product data names Securimage-wp-fixed Project Securimage-wp-fixed, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-34640 — CVSS 6.1 (medium): The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the…
• CVE-2023-35044 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions.