WordPress security by component

All In One Image Viewer Block

Plugin description

All In One Image Viewer Block is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 05, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: image-viewer

Latest vulnerability

CVE-2026-1294: All In One Image Viewer Block: Server-side request forgery

All In One Image Viewer Block is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.

PublishedFeb 05, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 05, 2026	CVE-2026-1294 All In One Image Viewer Block: Server-side request forgery All In One Image Viewer Block is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE7.2 NVDPending