CVE-2023-40209

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

CVE-2023-40209

CVE-2023-40209 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Highcompress Image Compressor. Public details show affected versions up to 6.0.0 (initial description) with a Red Hat entry mirroring the same issue. Patch/upgrade status is unclear: Wordfence ...

PT-2024-12865 · Unknown · Highcompress Image Compressor

Name of the Vulnerable Software and Affected Versions: Highcompress Image Compressor versions through 6.0.0 Description: The issue is related to a Missing Authorization vulnerability in the Highcompress Image Compressor. Recommendations: For versions through 6.0.0, at the moment, there is no...

WordPress plugin Highcompress Image Compressor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

Image Compressor & Optimizer - iLoveIMG < 1.0.6 - Admin+ PHP Object Injection

Description The plugin is vulnerable to PHP Object Injection in all versions up to 1.0.6 exclusive via deserialization of untrusted input. This makes it possible for authenticated attackers, with admin access or higher to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a...

WordPress Highcompress Image Compressor Plugin <= 6.1.2 is vulnerable to Broken Access Control

Software Highcompress Image Compressor Type Plugin Vulnerable versions = 6.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-40209 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 99c36206c314 Credits Abdi Pranat...

Pulverizr Injection Vulnerability

pulverizr is an image compressor. A security vulnerability exists in pulverizr 0.7.0 and earlier versions, which stems from a failure to perform any cleanup on the 'filename' parameter, which is directly used by the function. The vulnerability can be exploited to execute arbitrary commands...