CVE-2018-5284: Wpscoop Imageinject

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The ImageInject plugin 1.15 for WordPress has XSS via the flickr_appid parameter to wp-admin/options-general.php.

Affected products

• Wpscoop Imageinject: version 1.15 only

Published 2018-01-08. Last modified 2026-06-17.