Approved changes feed: RSS · Atom

cpe:2.3:a:proloybhaduri:lazyload_background_images:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProloybhaduri (2c0dc7c8-9072-5fe0-9ea2-80e1e44e13e4)
ProductLazyload Background Images (d267d9cb-ed8c-5090-bb94-453ec955fece)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12327 vulnerable 2026-06-08 06:23:51.718507 LazyLoad Background Images <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
MEDIUM (4.3)
The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_settings() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.
Published: 2025-01-07T04:22:20.523Z
Updated: 2026-04-08T17:26:09.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.