WordPress Smush plugin <= 3.9.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Taurus Omar in WordPress Smush plugin versions = 3.9.8. Solution Update the WordPress Smush plugin to the latest available version at least 3.9.9...

Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

The plugin does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious...

Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

The plugin does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious...

WordPress Smush Image Compression and Optimization plugin <= 2.9.1 - Authenticated XSS & Phar Deserialization vulnerabilities

Authenticated XSS & Phar Deserialization vulnerabilities found by RIPS Technologies in WordPress Smush Image Compression and Optimization plugin versions = 2.9.1. Solution Update the WordPress Smush Image Compression and Optimization plugin to the latest available version at least 3.0.0...

Smush Image Compression and Optimization <= 2.9.1 - Authenticated Phar Deserialization

The Smush – Lazy Load Images, Optimize & Compress Images WordPress plugin was affected by an Authenticated Phar Deserialization security vulnerability...

Smush Image Plugin for WordPress < 2.7.6 Directory Traversal

According to its self-reported version, the Appointments Plugin for WordPress running on the remote web server is prior to 2.7.6. It is, therefore, affected by a directory traversal vulnerability. An unauthenticated, remote attacker may exploit this to reveal underlying directory structures and...

WordPress Smush Image Compression and Optimization plugin path traversal vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Smush Image Compression and Optimization plugin is one of the image compression, optimization plugin. A path...

WordPress Smush Image Compression and Optimization plugin <=2.7.5 - File Traversal vulnerability

File Traversal vulnerability found by Ricardo Sánchez in WordPress Smush Image Compression and Optimization plugin versions =2.7.5. Solution Update the WordPress Smush Image Compression and Optimization plugin to the latest available version at least 2.7.6...

WordPress Smush Image Compression and Optimization Plugin < 2.7.6 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmudev:smushimagecompressionandoptimization"; if descriptio...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

Directory traversal

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

CVE-2017-15079 concerns the WordPress plugin Smush Image Compression and Optimization (pre-2.7.6). According to sources, this plugin version is vulnerable to a directory traversal flaw that permits an unauthenticated, remote attacker to reveal underlying directory structures. The vulnerability is...

PT-2017-13859

Name of the Vulnerable Software and Affected Versions Smush Image Compression and Optimization plugin versions prior to 2.7.6 Description The issue allows directory traversal. Recommendations For versions prior to 2.7.6, update to version 2.7.6 or later to resolve the issue...

CVE-2017-15079: Improper Limitation of a Pathname to a Restricted Directory

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

WordPress Smush Image 2.7.4.1 Directory Traversal

Class File transversal Remote Yes Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

WordPress Smush Image 2.7.4.1 Directory Traversal Vulnerability

WordPress Smush Image plugin version 2.7.4.1 suffers from a directory traversal vulnerability. Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

Smush Image Compression and Optimization <= 2.7.5 - File Transversal

The Smush – Lazy Load Images, Optimize & Compress Images WordPress plugin was affected by a File Transversal security vulnerability...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and other possible attacks. A malicious user can pass a malicious LucasArts Smush file to the system to cause a segmentation violation that can lead to the system crashing...