Thumbnail Editor

Thumbnail Editor has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Thumbnail Editor has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Peter Thaleikis. Thumbnail Editor is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Thumbnail Editor vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-53282

Thumbnail Editor <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Thumbnail Editor banner
Latestv2.3.4

Thumbnail Editor

aviplugins.com

Author

aviplugins.com

3.0(5)
60/100
Last Updated
2026-07-16 (2mo ago)
Active Installs
600+
Downloads
25,719
Requires WP
2.0.2+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2015-09-17 (11y ago)

When images are uploaded in the WordPress Media library section WordPress creates some thumbnails of that image. The size of these thumbnail images can be mentioned in the Settings->Media section. But there can be some big issues with these thumbnails. WordPress Crop/Resize these images dynamically when you upload an image. When thumbnails are CROPPED it is very much possible that it gets CROPPED from the wrong section of the uploaded image. This can produce some BAD looking thumbnail images. Which doesn’t look good in frontend of the site. This plugin will allow you to update those thumbnail images manually. The thumbnail image edit interface that this plugin provides is simple and very easy to use. The shortcodes and functions are provided in the image editor page of the plugin. Image editor links can be found in WordPress Media Library. Image files that can be edited are JPG, JPEG, GIF and PNG Thumbnail Editor PRO Checkout the PRO version features here. PRO version costs only USD 2.00 Support for Amazon S3 Bucket. Completely replace thumbnail images and upload new ones. Add Custom Texts to thumbnail images. You can add signature in the images. Different Text Fonts are available to choose from. Add Image Effects like Gray Scale, Sketch, Negative or Add Color Effects to the Image. Add image Borders with different border colors. Option to Revert Back the changes you made in the image.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C