CVE-2018-5285: Wpscoop Imageinject

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php.

Affected products

• Wpscoop Imageinject: version 1.15 only

Published 2018-01-08. Last modified 2026-06-17.