Manual Image Crop

Manual Image Crop has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Manual Image Crop has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Manual Image Crop is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Manual Image Crop vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2015-9426

Manual Image Crop <= 1.10 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2026-08-20 00:00	Manual Image Crop < 1.15 - Authenticated (Subscriber+) Insecure Direct Object Reference Manual Image Crop < 1.15	`CVE-2026-15384`	4.3 Medium	Shivamani Vastrala	Yes
2015-08-24 00:00	Manual Image Crop <= 1.10 - Reflected Cross-Site Scripting Manual Image Crop < 1.11	`CVE-2015-9426`	6.1 Medium	Marcin Probola	Yes

Showing 1–2 of 2 reports

Latestv1.15

Manual Image Crop

Author

Tomasz Sita

4.1(56)

82/100

Last Updated

2026-08-13 (1mo ago)

Active Installs

8,000+

Downloads

213,137

Requires WP

3.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2013-10-02 (13y ago)

Plugin allows you to manually crop all the image sizes registered in your WordPress theme (in particular featured image). Simply click on the “Crop” link next to any image in your media library. The WordPress Media Modal interface will be brought up and you are ready to go. Whole cropping process is really intuitive and simple. Apart from media library list, the plugin adds links in few more places: * Below featured image box (“Crop featured image”) * In the media insert modal window (once you select an image) Settings The plugin includes a settings page where you can configure: * Image quality settings * Visibility of crop options * Custom labels for image sizes GitHub Repository https://github.com/tomaszsita/wp-manual-image-crop Translations Czech (AI Generated) Dutch (Bernardo Hulsman) French (Gabriel Féron) German (Bertram Greenhough) Hungarian (Roland Kal) Italian (Alessandro Curci) Japanese (AI Generated) Korean (AI Generated) Polish (myself) Portuguese (Brazil) (AI Generated) Russian (Andrey Hohlov) Spanish (Andrew Kurtis) Swedish (Karl Oskar Mattsson) Turkish (AI Generated) Please contact me if you want to add a translation (or submit a pull request on GitHub)

View on WordPress.org