← WordPress Vulnerabilities
WordPress security by component

Image Sizes on Demand

Image Sizes on Demand is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 24, 2026; the highest CVE/CNA score is 6.1.

Plugin slug: image-sizes-on-demand

CVE-2026-8622: Image Sizes on Demand: Cross-site scripting

Image Sizes on Demand is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.3.

PublishedJun 24, 2026
Known safe version> 1.3
Safe version
Jun 24, 2026 CVE-2026-8622
Image Sizes on Demand: Cross-site scripting
Image Sizes on Demand is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.3.
> 1.3
CVE6.1
NVDPending