Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-49973

WordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control Vulnerability

Description

Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes: from n/a through <= 1.0.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes

Default version status: unaffected

  • 0 to ≤ 1.0.10affected

References