CVE-2024-8761

MEDIO 6.1CVE-2024-8761 · Published 17/09/2024 · updated 17/06/2026

In breve

CVE-2024-8761 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda share this image (wp-unit).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.9% delle vulnerabilità.
Correzione: aggiornare a 2.04 o successiva.

Package	Affected versions	Patched versions
share this image wp-unit	`< 2.04`	`2.04`

Description

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

References

plugins.trac.wordpress.org/browser/share-this-image/tags/2.03/assets/js/sti.js · Product
plugins.trac.wordpress.org/browser/share-this-image/tags/2.03/includes/class-sti-shortlink.php · Product
plugins.trac.wordpress.org/browser/share-this-image/tags/2.03/includes/class-sti-shortlink.php · Product
plugins.trac.wordpress.org/changeset/3152564 · Patch
wordpress.org/plugins/share-this-image · Product
wordfence.com/threat-intel/vulnerabilities/id/1e72d5c7-c601-4775-a825-4786bbd1b5f0 · Third Party Advisory

Altre vulnerabilità di share this image

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free