Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88222
HistorySep 28, 2022 - 12:00 a.m.

WordPress Kraken.io Image Optimizer Cross-Site Request Forgery Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
kraken.io
image optimizer
cross-site request forgery
vulnerability
php
blogging platforms
web application
attacker
malicious requests
sensitive actions

0.001 Low

EPSS

Percentile

39.6%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Kraken.io Image Optimizer 2.6.5 and earlier versions are vulnerable to cross-site request forgery. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use the vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.

0.001 Low

EPSS

Percentile

39.6%