CVE Intelligence

Cloudinary vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Cloudinary products: 1 record(s), with severity, exploitation and fixes.

Cloudinary 1

Exploited only (KEV) →

CVE-2026-24560 Medium · 5.4 CWE-862 Jan 23, 2026
WordPress Cloudinary plugin <= 3.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cloudinary Cloudinary cloudinary-image-management-and-manipulation-in-the-cloud-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cloudinary: from n/a through <= 3.3.2.