GCVE - cpe:2.3:a:magic_post_thumbnail:magic_post

Approved changes feed: RSS · Atom

cpe:2.3:a:magic_post_thumbnail:magic_post_thumbnail:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Magic Post Thumbnail (`24dc4626-0a33-521b-8cc7-e21689a8190c`)
Product	Magic Post Thumbnail (`6433fc9e-4806-5517-9fd0-21264d0943dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-43921`	vulnerable	2026-06-08 06:45:53.223908	WordPress Generate Images – Magic Post Thumbnail plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9. Published: 2024-08-29T18:11:26.840Z Updated: 2026-04-28T16:10:13.559Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/magic-post-thumbnail/wordpress-generate-images-magic-post-thumbnail-plugin-5-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29171`	vulnerable	2026-06-08 06:02:38.887453	WordPress Magic Post Thumbnail Plugin <= 4.1.10 is vulnerable to Cross Site Scripting (XSS) HIGH (7.1) Unauth. Reflected Cross-site Scripting (XSS) vulnerability in Magic Post Thumbnail plugin <= 4.1.10 versions. Published: 2023-04-07T14:21:24.443Z Updated: 2026-04-28T16:08:17.541Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/magic-post-thumbnail/wordpress-magic-post-thumbnail-plugin-4-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.