Image Regenerate & Select Crop

Image Regenerate & Select Crop has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 4 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.5 out of 10. 2023 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 4 issues recorded for Image Regenerate & Select Crop has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Image Regenerate & Select Crop is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Image Regenerate & Select Crop vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5

Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization on multiple AJAX actions

Read the full analysis

Vulnerability Records

4 records
Image Regenerate & Select Crop banner
Latestv8.2.1

Image Regenerate & Select Crop

Iulia Cazan

Author

Iulia Cazan

4.7(58)
94/100
Last Updated
2026-06-14 (3mo ago)
Active Installs
8,000+
Downloads
356,159
Requires WP
5.3+
Requires PHP
7.3.5+
Tested up to
WP 7.0.4
Created
2014-11-19 (12y ago)

Image Regenerate & Select Crop plugin provides enhanced control over image settings and files regeneration, allowing you to override native medium and large crop options, and register new sub-sizes. The plugin appends additional buttons to regenerate and crop images (providing detailed information about the registered image sub-sizes and their status within the application) and enables configuration of the plugin for global or specific post-type attached images. For the latest updates and detailed feature descriptions, visit https://iuliacazan.ro/image-regenerate-select-crop/. Key Features Details button: opens a lightbox displaying detailed information on any missing sub-size files and options for manual generation if applicable. For crop-type images, the plugin offers the one-click re-crop option, using specific portions of the original image with an instant preview feature. Regenerate button: allows one-click regeneration of all image sizes for a specific image, ensuring that all uploaded images are updated with the newly registered sizes. Raw cleanup button: allows you to delete all files and metadata for the attachment, keeping only the original file and information, so you can easily regenerate afterward only the desired sub-sizes. The plugin integrates seamlessly without requiring additional code, adding the buttons to the “Edit Media” page, as well as “Edit Post” and “Edit Page” sections where a featured image is present, and in the image block. It is compatible with custom post types (including WooCommerce products) and supports various resolutions and responsive layouts. Demo License This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C