PT-2024-31968

Name of the Vulnerable Software and Affected Versions Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress versions up to, and including, 3.12.10 Description The issue is related to Stored Cross-Site Scripting via the allow meme types function due to...

CVE-2024-4636: Improper Neutralization of Input During Web Page Generation

The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘allowmemetypes’ function in versions up to, and including, 3.12.10 due to insufficient input sanitization and output escaping. This makes it possible...