Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 3:54 p.m.3 views

CVE-2025-22288

Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through = 3.17.0...

4.1CVSS7AI score0.00063EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.2 views

WordPress plugin Smush Image Compression and Optimization 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

4.1CVSS8.5AI score0.00063EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.4 views

PT-2025-45187

Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through = 3.17.0...

4.1CVSS7AI score0.00063EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-6548

Malware in sbrugna...

7.5CVSS7.6AI score0.00937EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/06/20 12:0 a.m.15 views

WordPress Smush Image Compression and Optimization Plugin <= 3.16.4 is vulnerable to Broken Access Control

Software Smush Image Compression and Optimization Type Plugin Vulnerable versions = 3.16.4 Fixed in 3.16.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-3352 Patch priority Low CVSS severity Low 5.4 Developer WPMU DEV PSID d6c54863dce8 Credits Truoc Phan...

4.3CVSS6.5AI score0.00121EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2018/12/10 12:0 a.m.11 views

WordPress Smush Image Compression and Optimization plugin <= 2.9.1 - Authenticated XSS & Phar Deserialization vulnerabilities

Authenticated XSS & Phar Deserialization vulnerabilities found by RIPS Technologies in WordPress Smush Image Compression and Optimization plugin versions = 2.9.1. Solution Update the WordPress Smush Image Compression and Optimization plugin to the latest available version at least 3.0.0...

3.4AI score
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:0 a.m.58 views

Smush Image Plugin for WordPress < 2.7.6 Directory Traversal

According to its self-reported version, the Appointments Plugin for WordPress running on the remote web server is prior to 2.7.6. It is, therefore, affected by a directory traversal vulnerability. An unauthenticated, remote attacker may exploit this to reveal underlying directory structures and...

7.5CVSS7.4AI score0.00937EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2017/10/09 12:0 a.m.76 views

WordPress Smush Image Compression and Optimization Plugin < 2.7.6 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmudev:smushimagecompressionandoptimization"; if descriptio...

7.5CVSS7.6AI score0.00937EPSS
Exploits0References2
Prion
Prion
added 2017/10/06 6:29 p.m.14 views

Directory traversal

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

5CVSS7.6AI score0.00937EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/10/06 6:29 p.m.12 views

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

7.5CVSS7.6AI score0.00937EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/10/06 6:0 p.m.22 views

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

7.6AI score0.00937EPSS
Exploits0References2
CVE
CVE
added 2017/10/06 6:0 p.m.72 views

CVE-2017-15079

CVE-2017-15079 concerns the WordPress plugin Smush Image Compression and Optimization (pre-2.7.6). According to sources, this plugin version is vulnerable to a directory traversal flaw that permits an unauthenticated, remote attacker to reveal underlying directory structures. The vulnerability is...

7.5CVSS7.6AI score0.00937EPSS
Exploits0References2Affected Software1
0day.today
0day.today
added 2017/10/04 12:0 a.m.32 views

WordPress Smush Image 2.7.4.1 Directory Traversal Vulnerability

WordPress Smush Image plugin version 2.7.4.1 suffers from a directory traversal vulnerability. Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

7AI score
Exploits0
Packet Storm
Packet Storm
added 2017/10/04 12:0 a.m.49 views

WordPress Smush Image 2.7.4.1 Directory Traversal

Class File transversal Remote Yes Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

0.2AI score
Exploits0
Rows per page
Query Builder