CVE-2018-1000510

6.5 mediumEPSS 1.0%

Medium (6.5) in silkypress image zoom. EPSS 1.0% chance of exploitation in the next 30 days.

WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally (or unintentionally via CSRF) by any logged in user. This vulnerability appears to have been fixed in 1.24.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2018-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

silkypress:image_zoom

References

https://advisories.dxw.com/advisories/wp-image-zoom-dos/
https://advisories.dxw.com/advisories/wp-image-zoom-dos/

Check your stack JSON