一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月22日

CVE-2025-14484 [MEDIUM] – The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due

未分类
📑 文章目录

The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys (Pixabay, Unsplash, Pixels) configured by site administrators via the ‘pixabay_api’, ‘unsplash_api’, or ‘pixels_api’ parameters.