Vulnerabilities > Getbutterfly > Imagepress > 1.0.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-12 | CVE-2024-9776 | Cross-site Scripting vulnerability in Getbutterfly Imagepress The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. | 4.8 |
| 2024-10-12 | CVE-2024-9778 | Cross-Site Request Forgery (CSRF) vulnerability in Getbutterfly Imagepress The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. | 4.3 |