Lucene search
+L

5 matches found

NVD
NVD
•added 2026/01/14 6:15 a.m.•48 views

CVE-2025-14482

The Crush.pics Image Optimizer - Image Compression and Optimization plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple functions in all versions up to, and including, 1.8.7. This makes it possible for authenticated attackers, with...

4.3CVSS0.00297EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/14 5:28 a.m.•42 views

CVE-2025-14482 Crush.pics Image Optimizer <= 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

The Crush.pics Image Optimizer - Image Compression and Optimization plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple functions in all versions up to, and including, 1.8.7. This makes it possible for authenticated attackers, with...

4.3CVSS0.00297EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/14 5:28 a.m.•7 views

CVE-2025-14482 Crush.pics Image Optimizer <= 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

The Crush.pics Image Optimizer - Image Compression and Optimization plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple functions in all versions up to, and including, 1.8.7. This makes it possible for authenticated attackers, with...

4.3CVSS5.2AI score0.00297EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•13 views

WordPress plugin Crush.pics Image Optimizer - Image Compression and Optimization 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.4AI score0.00297EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•0 views

CVE-2025-14482: Missing Authorization

The Crush.pics Image Optimizer - Image Compression and Optimization plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple functions in all versions up to, and including, 1.8.7. This makes it possible for authenticated attackers, with...

4.3CVSS5.6AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder