Dreamstime Stock Photos
Dreamstime Stock Photos has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Dreamstime Stock Photos has a vendor fix available, so running the current release closes it.
All of these findings were reported by Abdi Pranata. Dreamstime Stock Photos is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-25090Dreamstime Stock Photos <= 4.1 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Dreamstime Stock Photos
Author
dreamstime
Insert stock photos & images easily & safely into your posts and pages from the largest selection of free images and professional stock photos online without leaving WordPress. The Dreamstime plugin enhances your WordPress workflow by allowing you to download royalty-free and public domain images directly from Dreamstime’s database of millions of free stock photos and commercial Royalty-Free images from within the WordPress Add Media tool. All images are model released and properly attributed so they are 100% safe to use without ever having to worry about model or photographer claims. NEW in Version 5.0: Full Block Editor Integration! The plugin now features a dedicated “Dreamstime Image” block that seamlessly integrates with WordPress’s modern Block Editor (Gutenberg). Simply add the block, browse Dreamstime’s library, and insert images directly into your content – all within the familiar block editing experience. Two Ways to Use: 1. Dreamstime Image Block – Add the custom block from the block inserter for a streamlined experience 2. Classic Media Modal – Use the “Add Dreamstime Media” button for the traditional workflow For current Dreamstime users, the plugin is linked to your existing account so if you’ve already purchased an image prior to installing the WordPress plugin, you won’t have to purchase the same image again. New users can quickly sign up a free account at Dreamstime.com. Dreamstime contributors can add their own images to their blog articles without having to pay for them. You can also make money with the automatic Dreamstime referral program integration. Using the automatically generated referral links you will receive 10% of all sales and uploads made within the first 3 years for each user you refer! Features: NEW: Native Block Editor (Gutenberg) Support – Dedicated Dreamstime Image block for modern WordPress Over 357,000,000 free and Royalty-Free stock photos and illustrations to choose from Insert images and illustrations directly into your posts or pages with ease with seamless Dreamstime account integration Works with both Block Editor and Classic Editor 100% safe, model-released images Image attribution automatically added Earn 10% referral commissions with automatically generated referral links Thousands of free stock photos and public domain (CC0) images available REST API endpoints for advanced integrations
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C