Approved changes feed: RSS · Atom

cpe:2.3:a:background-image-cropper:background_image_cropper:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBackground Image Cropper (d14bf4d1-cfbc-526d-92f6-5b13ae47b777)
ProductBackground Image Cropper (ff48b9de-3274-5f65-a16b-7f3937c7b824)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58348 vulnerable 2026-06-08 06:56:14.533960 WordPress Background Image Cropper 1.2 Remote Code Execution
CRITICAL (9.8)
WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the plugin directory to execute arbitrary code on the server.
Published: 2026-06-08T01:55:30.617Z
Updated: 2026-06-08T13:37:35.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.