476 matches found
CVE-2025-25163-Nuclei-Template
CVE-2025-25163 用 Nuclei テンプレート 🚀 概要 このリポジトリは、WordPress 用プラグイン Plugin A/B Image Optimizer における パストラバーサル 脆弱性 CVE-2025-25163 を検出するために特別に設計された Nuclei テンプレートを提供します。この脆弱性は深刻なセキュリティリスクをもたらし、機密サーバーファイルへの不正アクセスを許します。 🔍 脆弱性の説明 CVE-2025-25163...
CVE-2023-40600
CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - デバッグログを介した認証不要の機密情報漏洩 説明 EWWW Image Optimizer プラグイン WordPress は、バージョン 7.2.0 以前において、debuglog 関数を介して機密情報が漏洩する脆弱性が存在します。これにより、デバッグログが有効な場合、認証されていない攻撃者が機密デバッグデータを取得できる可能性があります。 Severity: medium CVE ID: CVE-2023-40600 CVSS Score: 5.3 CVSS Metrics:...
Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting
Image Optimizer by 10web before 1.0.26 is susceptible to cross-site scripting via the iowdtabsactive parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can...
CVE-2025-25163
CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - 認証済み（Subscriber+）任意ファイルダウンロード 説明 WordPress用プラグイン Plugin A/B Image Optimizer は、バージョン3.3までのすべてのバージョンにおいて、ディレクトリトラバーサルに対して脆弱です。これにより、Subscriberレベルのアクセス権限以上の認証済み攻撃者が、機密情報を含む可能性のあるサーバー上の任意のファイルの内容を読み取ることが可能になります。 詳細 タイプ : プラグイン スラッグ : images-optimizer...
WordPress EWWW Image Optimizer plugin <= 8.7.7 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...
CVE-2026-92826
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
CVE-2026-92826
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 8.7.7 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Parameter Key . An unauthenticated attacker can inject arbit...
CVE-2026-92826 EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
EUVD-2026-91894
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability discovered by Karthik in WordPress Plugin EWWW Image Optimizer versions 8.6.0-8.7.7...
CVE-2026-97246
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97067
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
EUVD-2026-89910
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246
The ShortPixel Image Optimizer plugin for WordPress (versions
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...