Image Buzz
Monthly
Unauthenticated attackers can modify the Pixabay, Unsplash, and Pexels API keys configured in the Image Buzz WordPress plugin (versions up to and including 1.0.3) due to missing authorization checks. The flaw, rated CVSS 5.3, allows remote modification of site-wide API key settings without login or user interaction, though it does not enable data theft or code execution. No public exploit or active exploitation has been identified at time of analysis.
Unauthenticated attackers can modify the Pixabay, Unsplash, and Pexels API keys configured in the Image Buzz WordPress plugin (versions up to and including 1.0.3) due to missing authorization checks. The flaw, rated CVSS 5.3, allows remote modification of site-wide API key settings without login or user interaction, though it does not enable data theft or code execution. No public exploit or active exploitation has been identified at time of analysis.