Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Bww
Url Image Importer
Bww Url Image Importer vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
bww
url image importer
URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2025-14120
6.4
Medium
January 6, 2026
bww
url image importer
URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload
CVE-2025-12138
8.8
High
November 21, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open