Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-2450

reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown reSmush.it : the only free Image Optimizer & compress plugin

  • 0.4.4 to < 0.4.4affected

References