Filtered by vendor Advancedplugins Subscriptions
Filtered by product Ultimateimagetool Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-28390 1 Advancedplugins 1 Ultimateimagetool 2025-11-19 9.8 Critical
An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control.
CVE-2023-30200 1 Advancedplugins 1 Ultimateimagetool 2024-11-21 7.5 High
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack.