Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/03/31 12:0 a.m.10 views

VulnCheck KEV: CVE-2023-40600

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0...

7.5CVSS7.8AI score0.46927EPSS
In wildExploits1References2
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.1 views

WordPress Plugin EWWW Image Optimizer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.5AI score0.00185EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.4 views

WordPress Plugin EWWW Image Optimizer Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS6.2AI score0.46927EPSS
Exploits1References1
OSV
OSV
added 2023/07/12 4:15 a.m.1 views

CVE-2020-36750

The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewwwnggbulkinit function. This makes it possible for unauthenticated attackers to perform bulk image...

4.3CVSS5.6AI score0.00156EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2021/08/02 12:0 a.m.1 views

The vulnerability of the EWWW Image Optimizer plugin of the WordPress content management system, related to a violation of data protection mechanisms, allows attackers to execute arbitrary code.

The vulnerability of the EWWW Image Optimizer plugin of the WordPress content management system is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.06828EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2021/05/05 12:0 a.m.2 views

WordPress 插件安全漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plugin EWWW Image Optimizer prior to version 2.8.5 that allows remote command execution because it relies on a protection mechanism involving boolval, which was not available prio...

10CVSS8.6AI score0.06828EPSS
Exploits0References3
Rows per page
Query Builder