Image Regenerate & Select Crop
Image Regenerate & Select Crop has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 4 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.5 out of 10. 2023 was the busiest year with 4 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 4 issues recorded for Image Regenerate & Select Crop has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Image Regenerate & Select Crop is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization on multiple AJAX actions
Read the full analysisVulnerability Records

Image Regenerate & Select Crop
Author
Iulia Cazan
Image Regenerate & Select Crop plugin provides enhanced control over image settings and files regeneration, allowing you to override native medium and large crop options, and register new sub-sizes. The plugin appends additional buttons to regenerate and crop images (providing detailed information about the registered image sub-sizes and their status within the application) and enables configuration of the plugin for global or specific post-type attached images. For the latest updates and detailed feature descriptions, visit https://iuliacazan.ro/image-regenerate-select-crop/. Key Features Details button: opens a lightbox displaying detailed information on any missing sub-size files and options for manual generation if applicable. For crop-type images, the plugin offers the one-click re-crop option, using specific portions of the original image with an instant preview feature. Regenerate button: allows one-click regeneration of all image sizes for a specific image, ensuring that all uploaded images are updated with the newly registered sizes. Raw cleanup button: allows you to delete all files and metadata for the attachment, keeping only the original file and information, so you can easily regenerate afterward only the desired sub-sizes. The plugin integrates seamlessly without requiring additional code, adding the buttons to the “Edit Media” page, as well as “Edit Post” and “Edit Page” sections where a featured image is present, and in the image block. It is compatible with custom post types (including WooCommerce products) and supports various resolutions and responsive layouts. Demo License This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C