Getty Images

Getty Images has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Server-Side Request Forgery (SSRF), behind 1 of the records (100%).

The one issue recorded for Getty Images has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Nabil Irawan. Getty Images is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Getty Images vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-39630

Getty Images <= 4.1.0 - Authenticated (Contributor+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

1 records
Getty Images banner
Latestv4.1.0

Getty Images

Getty Images

Author

Getty Images

3.0(24)
60/100
Last Updated
2023-05-03 (3y ago)
Active Installs
2,000+
Downloads
153,872
Requires WP
3.9+
Requires PHP
0+
Tested up to
WP 6.2.11
Created
2014-01-22 (13y ago)

Getty Images is among the world’s leading creators and distributors of award-winning still imagery, video, music and multimedia products, as well as other forms of premium digital content, available through its trusted house of brands, including iStockphoto© and Thinkstock©. Its best-in-class photographers and imagery help customers produce inspiring work which appears every day in the world’s most influential newspapers, magazines, advertising campaigns, films, television programs, books and online media. The Getty Images WordPress plugin integrates seamlessly with your WordPress 3.5+ Media Manager and lets you create posts with photos and illustrations from Getty Images – without ever leaving your WordPress site. With 2.0, users can now access over 50 million embeddable images for editorial use on their WordPress.org site, for free. New users: Access to over 50 million embeddable images, available for editorial use and at no cost to you. Getty Images customers can access and license imagery: Search millions of photos, vectors and illustrations, customized to your Getty Images account. Download and preview comp images before you post. Download, insert and publish any size image using your existing agreement with Getty Images. Licensed images are saved to your Media Library for future use. Using the plugin once installed Go to a new or existing post. Select Getty Images above the composition area, or access Getty Images from the Media tab. For users who wish to embed images in their blog: Select Access Embeddable Images. Start searching for images that fit your needs. Select Embed into Post. Publish! For customers: Select the Getty Images Customer option. Login your Getty Images account to download images for preview or publication, and to access your content and active agreements. Start searching, downloading and using!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C