476 matches found
CVE-2025-25163-Nuclei-Template
CVE-2025-25163 的 Nuclei 模板 🚀 概述 该仓库包含一个专门用于检测 WordPress 插件 A/B Image Optimizer 中 路径遍历 漏洞（CVE-2025-25163）的 Nuclei 模板。此漏洞构成严重的安全风险，允许未经授权访问服务器敏感文件。 🔍 漏洞描述 CVE-2025-25163 是一个路径遍历漏洞，允许攻击者操作文件路径，从而访问预期目录结构之外的文件。利用该漏洞可能导致敏感数据泄露，危及系统的机密性和完整性。 🛑 受影响版本 插件 A/B Image Optimizer ：版本 最高至 3.3 （包括 3.3）。 📊 CVSS 评...
CVE-2023-40600
CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - 未经授权的敏感信息通过调试日志泄露 描述 EWWW Image Optimizer WordPress 插件在所有版本（包括 7.2.0 及以下版本）中，通过 debuglog 函数存在敏感信息泄露漏洞。这使得未认证的攻击者能够在启用调试日志记录时提取敏感的调试数据。 Severity: medium CVE ID: CVE-2023-40600 CVSS Score: 5.3 CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...
Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting
Image Optimizer by 10web before 1.0.26 is susceptible to cross-site scripting via the iowdtabsactive parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can...
CVE-2025-25163
CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - 已认证（订阅者+）任意文件下载 描述 Plugin A/B Image Optimizer WordPress插件存在目录遍历漏洞，影响版本直至3.3（含）。该漏洞使得已认证的攻击者（订阅者级别及以上访问权限）能够读取服务器上任意文件的内容，其中可能包含敏感信息。 详情 类型 : 插件 Slug : images-optimizer 受影响版本 : 3.3 CVSS 评分 : 6.5 CVSS 评级 : 中等 CVSS 向量 :...
WordPress EWWW Image Optimizer plugin <= 8.7.7 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin EWWW Image Optimizer versions = 8.7.7...
CVE-2026-92826
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
CVE-2026-92826
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 8.7.7 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Parameter Key . An unauthenticated attacker can inject arbit...
CVE-2026-92826 EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
EUVD-2026-91894
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability discovered by Karthik in WordPress Plugin EWWW Image Optimizer versions 8.6.0-8.7.7...
CVE-2026-97246
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97067
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
EUVD-2026-89910
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246
The ShortPixel Image Optimizer plugin for WordPress (versions
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...
CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...