Skip to content

Vendor

splashing images project vulnerabilities

2 published CVES affecting splashing images project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of splashing images project alerts

Products

Latest splashing images project CVEs

Newest publication first

  1. CVE-2018-6195 Splashing Images <= 2.1 - PHP Object Injection

    Published
    HighCVSS 7.2 EPSS 3.7%

    admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object Injection attacks via crafted serialized data in the 'session'...

  2. CVE-2018-6194 Splashing Images < 2.1.1 - Cross-Site Scripting

    Published
    MediumCVSS 4.8 EPSS 1.0%

    A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.