CVE-2018-1000510

MEDIUM 6.5CVE-2018-1000510 · Published 26/06/2018 · updated 17/06/2026

In short

CVE-2018-1000510 is a MEDIUM (CVSS 6.5) vulnerability affecting image zoom (silkypress).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
image zoom silkypress	`= 1.23`	No fix yet

Description

WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally (or unintentionally via CSRF) by any logged in user. This vulnerability appears to have been fixed in 1.24.

References

advisories.dxw.com/advisories/wp-image-zoom-dos · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free