Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:56 a.m.2 views

CVE-2023-40196

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin = 3.1.11 versions...

7.1CVSS5.8AI score0.00113EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:22 a.m.2 views

CVE-2024-1089

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS5.1AI score0.00237EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:18 a.m.2 views

CVE-2023-30494

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin = 3.1.10 versions...

7.1CVSS5.8AI score0.00104EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.2 views

PT-2024-36146 · Unknown · Imagerecycle Pdf & Image Compression

Name of the Vulnerable Software and Affected Versions: ImageRecycle pdf & image compression versions prior to 3.1.17 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This problem affects the...

7.1CVSS6.8AI score0.00261EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.0 views

WordPress plugin ImageRecycle pdf & image compression 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin ImageRecycle pdf & image...

7.1CVSS7.8AI score0.00261EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/08/26 3:20 a.m.2 views

WordPress ImageRecycle pdf & image compression plugin <= 3.1.14 - Missing Authorization in Several AJAX Actions vulnerability

Missing Authorization in Several AJAX Actions vulnerability discovered by Lucio Sá in WordPress Plugin ImageRecycle pdf & image compression versions = 3.1.14...

5CVSS7AI score0.00133EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/08/24 3:15 a.m.1 views

CVE-2024-8120

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce validation on several functions in the class/class-image-otimizer.php file. This makes it possible for...

4.3CVSS5.6AI score0.00175EPSS
Exploits0References2
OSV
OSV
added 2024/08/24 3:15 a.m.2 views

CVE-2024-6631

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS5.8AI score0.00133EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.2 views

CVE-2024-1339

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the reinitialize function. This makes it possible for unauthenticated attackers to remove...

4.3CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.1 views

CVE-2024-1334

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the enableOptimization function. This makes it possible for unauthenticated attackers to...

4.3CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.2 views

CVE-2024-1335

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the disableOptimization function. This makes it possible for unauthenticated attackers to...

4.3CVSS7.2AI score0.00112EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.2 views

CVE-2024-1089

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.3 views

CVE-2024-1091

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS7.3AI score
Exploits0References2
OSV
OSV
added 2024/02/29 1:43 a.m.3 views

CVE-2024-0983

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

WordPress Plugin ImageRecycle pdf & image compression security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00112EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.2 views

WordPress Plugin ImageRecycle pdf & image compression plugin for WordPress security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.7AI score0.0033EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.4 views

PT-2024-16622 · WordPress · Imagerecycle

Name of the Vulnerable Software and Affected Versions: ImageRecycle pdf & image compression plugin for WordPress versions up to, and including, 3.1.13 Description: The issue allows authenticated attackers with subscriber-level access and above to modify image optimization settings due to a missin...

4.3CVSS9.3AI score0.00237EPSS
Exploits0References6
OSV
OSV
added 2023/09/04 12:15 p.m.2 views

CVE-2023-40196

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin = 3.1.11 versions...

6.1CVSS7.3AI score0.00113EPSS
Exploits0References1
OSV
OSV
added 2023/09/04 11:15 a.m.2 views

CVE-2023-30494

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin = 3.1.10 versions...

6.1CVSS7.3AI score0.00104EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/09/04 12:0 a.m.2 views

WordPress plugin ImageRecycle pdf & image compression cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00104EPSS
Exploits0References2
Rows per page
Query Builder