The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys (Pixabay, Unsplash, Pixels) configured by site administrators via the ‘pixabay_api’, ‘unsplash_api’, or ‘pixels_api’ parameters.
2026年9月22日
CVE-2025-14484 [MEDIUM] – The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due
📑 文章目录



