← WordPress Vulnerabilities
WordPress security by component

WP Image Zoom

WP Image Zoom is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 19, 2021; the highest CVE/CNA score is 5.3.

Plugin slug: wp-image-zoom

CVE-2021-24447: WP Image Zoom: Filesystem traversal

WP Image Zoom is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedJul 19, 2021
Safe version guidanceSee mitigation notes
Safe version
Jul 19, 2021 CVE-2021-24447
WP Image Zoom: Filesystem traversal
WP Image Zoom is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE5.3
NVD5.3