Skip to main content

Video Embed Thumbnail Generator

2 CVEs product

Monthly

CVE-2012-1786 Mar 19, 18:55 MEDIUM PATCH This Month

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure Wordpress Plugin Video Embed Thumbnail Generator
NVD
CVSS 2.0
5.0
EPSS
0.3%
CVE-2012-1785 Mar 19, 18:55 HIGH PATCH This Week

kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

PHP WordPress Information Disclosure Wordpress Plugin Video Embed Thumbnail Generator
NVD
CVSS 2.0
7.5
EPSS
2.4%
EPSS 0% CVSS 5.0
MEDIUM PATCH This Month

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure Wordpress Plugin +1
NVD
EPSS 2% CVSS 7.5
HIGH PATCH This Week

kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

PHP WordPress Information Disclosure +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy