Lucene search
K

141 matches found

CNNVD
CNNVD
added 2024/08/24 12:0 a.m.2 views

WordPress plugin ImageRecycle pdf & image compression 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.7CVSS6.6AI score0.00182EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.4 views

WordPress plugin ImageRecycle pdf & image compression 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5CVSS6.5AI score0.00264EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.4 views

PT-2024-38812 · WordPress · Imagerecycle

Name of the Vulnerable Software and Affected Versions: ImageRecycle pdf & image compression plugin for WordPress versions up to, and including, 3.1.14 Description: The issue is due to missing or incorrect nonce validation on several functions in the class/class-image-otimizer.php file. This allow...

4.7CVSS6.8AI score0.00182EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.4 views

PT-2024-37760 · WordPress · Imagerecycle

Name of the Vulnerable Software and Affected Versions: ImageRecycle pdf & image compression plugin for WordPress versions up to, and including, 3.1.14 Description: The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing...

5CVSS6.6AI score0.00264EPSS
Exploits0References8
OSV
OSV
added 2024/02/29 1:43 a.m.1 views

CVE-2024-1338

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the stopOptimizeAll function. This makes it possible for unauthenticated attackers to...

4.3CVSS7.2AI score0.00208EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.3 views

CVE-2024-1336

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the optimizeAllOn function. This makes it possible for unauthenticated attackers to modif...

4.3CVSS5.7AI score
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.14 views

CVE-2024-1338

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the stopOptimizeAll function. This makes it possible for unauthenticated attackers to...

4.3CVSS4.2AI score0.00208EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.20 views

CVE-2024-1336

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the optimizeAllOn function. This makes it possible for unauthenticated attackers to modif...

4.3CVSS4.2AI score0.00208EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.16 views

CVE-2024-1335

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the disableOptimization function. This makes it possible for unauthenticated attackers to...

4.3CVSS4.2AI score0.0021EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.15 views

CVE-2024-1334

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the enableOptimization function. This makes it possible for unauthenticated attackers to...

4.3CVSS4.2AI score0.00246EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.1 views

CVE-2024-1090

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-leve...

4.3CVSS5.8AI score0.00347EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.19 views

CVE-2024-1090

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-leve...

4.3CVSS4.3AI score0.00347EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.18 views

CVE-2024-1089

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS4.3AI score0.00428EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.3 views

CVE-2024-0984

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00372EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.15 views

CVE-2024-0983

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...

4.3CVSS4.3AI score0.00372EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.18 views

CVE-2024-0984

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...

4.3CVSS4.3AI score0.00372EPSS
Exploits0References2
Prion
Prion
added 2024/02/29 1:43 a.m.19 views

Design/Logic Flaw

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...

4CVSS6.7AI score0.00347EPSS
Exploits0References2
Prion
Prion
added 2024/02/29 1:43 a.m.21 views

Design/Logic Flaw

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...

4CVSS6.7AI score0.00372EPSS
Exploits0References2
Prion
Prion
added 2024/02/29 1:43 a.m.28 views

Cross site request forgery (csrf)

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the disableOptimization function. This makes it possible for unauthenticated attackers to...

4.3CVSS6.6AI score0.0021EPSS
Exploits0References2
Prion
Prion
added 2024/02/29 1:43 a.m.23 views

Cross site request forgery (csrf)

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the optimizeAllOn function. This makes it possible for unauthenticated attackers to modif...

4.3CVSS6.6AI score0.00208EPSS
Exploits0References2
Rows per page
Query Builder