PT-2022-16711 · WordPress · Resmush.It

Name of the Vulnerable Software and Affected Versions: reSmush.it plugin versions prior to 0.4.4 Description: The issue concerns a lack of authorization in various AJAX actions within the reSmush.it plugin, allowing any logged-in users, such as subscribers, to call these actions. Recommendations:...