CVE-2024-30481 WordPress JCH Optimize plugin <= 4.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0...

CVE-2024-30481 WordPress JCH Optimize plugin <= 4.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0...

WordPress plugin JCH Optimize security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

JCH Optimize < 4.2.1 - Authenticated (Subscriber+) Directory Traversal

Description The JCH Optimize plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.2.0. This makes it possible for authenticated attackers, with subscriber access and above, to access directory information on the Optimize Image page...

CVE-2024-34808

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.2.0...

CVE-2024-34808 WordPress JCH Optimize plugin <= 4.2.0 - Path Traversal vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.2.0...

CVE-2024-34808 WordPress JCH Optimize plugin <= 4.2.0 - Path Traversal vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.2.0...

CVE-2024-34808

CVE-2024-34808 is an authenticated path traversal vulnerability in JCH Optimize for WordPress (JCH Optimize

WordPress Plugin JCH Optimize 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress JCH Optimize plugin <= 4.2.0 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin JCH Optimize versions = 4.2.0...

WordPress JCH Optimize Plugin <= 4.2.0 is vulnerable to Path Traversal

Software JCH Optimize Type Plugin Vulnerable versions = 4.2.0 Fixed in 4.2.1 OWASP Top 10 A6: Security Misconfiguration Classification Path Traversal CVE CVE-2024-34808 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 076d61af6638 Credits Dhabaleshwar Das Required...

WordPress JCH Optimize Plugin <= 4.0.0 is vulnerable to Broken Access Control

Software JCH Optimize Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.0.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30481 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 290d3805d22d Credits Abdi Pranata Required privileg...

CVE-2023-25491

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...

CVE-2023-25491

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...

CVE-2023-25491

CVE-2023-25491 affects the WordPress JCH Optimize plugin (

CVE-2023-25491 WordPress JCH Optimize Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Samuel Marshall JCH Optimize plugin = 3.2.2 versions...

PT-2023-20110 · WordPress · Jch Optimize

Name of the Vulnerable Software and Affected Versions: JCH Optimize plugin versions 3.2.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the JCH Optimize plugin. This vulnerability requires authentication with admin+ privileges...

WordPress plugin JCH Optimize 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

JCH Optimize < 3.2.3 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...