Lucene search
HistoryNov 14, 2022 - 3:15 p.m.
CVE-2022-2450
wordpress
resmush.it
image optimizer
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.
Affected configurations
Node
resmush.itresmush.it_image_optimizerRange<0.4.4wordpress
Related
cve
cve
CVE-2022-2450
2022-11-14 15:15:19
cvelist
cvelist
CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls
2022-11-14 00:00:00
wpvulndb
wpvulndb
reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls
2022-10-19 00:00:00
wpexploit
wpexploit
reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls
2022-10-19 00:00:00
prion
prion
Design/Logic Flaw
2022-11-14 15:15:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
Related for NVD:CVE-2022-2450