The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Image Sizes Plugin | — | Update image-sizes plugin to version 6.2.2, or a newer patched version | Jul 30, 2026 | Jun 29, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub