demon image annotation

demon image annotation has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Improper Validation Of Specified Quantity In Input, SQL Injection.

Every one of the 3 issues recorded for demon image annotation has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. demon image annotation is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all demon image annotation vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-2864

demon image annotation <= 4.7 - Cross-Site Request Forgery to Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
demon image annotation banner
Latestv5.5

demon image annotation

demonisblack

Author

demonisblack

5.0(2)
100/100
Last Updated
2026-05-18 (4mo ago)
Active Installs
10+
Downloads
17,937
Requires WP
2.5+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2010-07-30 (16y ago)

This plugin allows you to add textual annotations to images by select a region of the image and then attach a textual description, the concept of annotating images with user comments. Integration with JQuery Image Annotation from Chris (http://www.flipbit.co.uk/jquery-image-annotation.html) with PHP support from GitHub (http://github.com/stas/jquery-image-annotate-php-fork). Live Demo: https://www.superwhite.cc/demon/image-annotation-plugin Needs Your Support: It is hard to continue development and support for this free plugin without contributions from users like you. If you enjoy using demon Image Annotation and find it useful, please consider making a donation. Your donation will help encourage and support the plugin’s continued development and better user support. Donate Some features: Option to approve, edit and remove image notes in admin page. Preview image annotation in admin page. Auto insert unique id attribute for all the images for image note. Option to allow image annotation for login user who can moderate comment only Gravatar in the notes Option to sync with wordpress comments. Option to show thumbnail in comment list. &#8216;Mouseover to load notes’ on top of every image note (editable). &#8216;Link’ on top of every image note if hyperlink image (editable). There’s a new method to exlcude image annotation after version 3, but previous version method id=”img-exclude” still work. Image preview for admin editing is only support version 3 and above, image note added with previous version will not support.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C