binarymoon wordthumb vulnerabilities

Latest binarymoon wordthumb CVEs

Newest publication first

1. CVE-2014-4663 Ajax Search Lite < 3.11 - Remote Code Execution

   Published 2014-07-15

   Medium·CVSS 6.8 EPSS 9.8%

   TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.