Login Request a demo
EA
Product
Easyimages2.0
by Easyimages2.0 Project · last CVE Dec 11, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 4Low 0
Severity
All severities8Critical2High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Easyimages2.0 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-65474
9.8
1%
Dec 11
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to…
Affected: through 2.8.6
CVE-2025-65473
9.1
1%
Dec 11
An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary…
Affected: through 2.8.6
CVE-2025-65471
8.8
1%
Dec 11
An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted…
Affected: through 2.8.6
CVE-2025-65472
8.8
0%
Dec 11
A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user…
Affected: through 2.8.6
CVE-2023-33599
6.1
0%
May 23
EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php
Affected: before 2.8.3
CVE-2025-13415
5.4
0%
Nov 19
icret EasyImages SVG Image upload.php cross site scripting
Affected: through 2.8.6
CVE-2023-1181
5.4
0%
Mar 5
Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7
Affected: before 2.6.7
CVE-2023-7098
5.3
1%
Dec 25
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in icret EasyImages 2.8.3
Affected: 2.8.3
Showing 8