Magic Post Thumbnail
Approved changes feed: RSS · Atom
cpe:2.3:a:magic-post-thumbnail:magic_post_thumbnail:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Magic Post Thumbnail (8efd8f51-7450-5b5a-bbfb-7f4f85853555) |
|---|---|
| Product | Magic Post Thumbnail (731b5adb-df44-5efb-b5a5-1f1c6b7c4ea0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6724 |
vulnerable | 2026-06-08 06:58:20.256438 |
Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
The Generate Images WordPress plugin before 5.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2024-08-13T06:00:02.297Z
Updated: 2024-08-13T14:26:06.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43921 |
vulnerable | 2026-06-08 06:45:53.224497 |
WordPress Generate Images – Magic Post Thumbnail plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9.
Published: 2024-08-29T18:11:26.840Z
Updated: 2026-04-28T16:10:13.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29171 |
vulnerable | 2026-06-08 06:02:38.888178 |
WordPress Magic Post Thumbnail Plugin <= 4.1.10 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-site Scripting (XSS) vulnerability in Magic Post Thumbnail plugin <= 4.1.10 versions.
Published: 2023-04-07T14:21:24.443Z
Updated: 2026-04-28T16:08:17.541Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.