Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-2450
HistoryNov 14, 2022 - 3:15 p.m.

Design/Logic Flaw

2022-11-1415:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
image optimizer
logic flaw
authorization
ajax
security vulnerability

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.

CPENameOperatorVersion
resmush.it_image_optimizerlt0.4.4

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Related for PRION:CVE-2022-2450