15 matches found
CVE-2024-1339
CVE-2024-1339 affects the WordPress plugin ImageRecycle pdf & image compression (versions
CVE-2024-1091
The CVE-2024-1091 entry concerns ImageRecycle pdf & image compression for WordPress. A missing capability check in the reinitialize function across versions up to and including 3.1.13 leads to unauthorized data modification by authenticated users with subscriber-level access or higher. The vulner...
CVE-2024-1335
The ImageRecycle pdf & image compression WordPress plugin (
CVE-2024-1336
CVE-2024-1336 refers to the ImageRecycle pdf & image compression WordPress plugin (versions
CVE-2024-1338
CVE-2024-1338 — ImageRecycle pdf & image compression (WordPress) Affects: ImageRecycle pdf & image compression plugin for WordPress, versions up to 3.1.13.Root cause: Missing/incorrect nonce validation in the stopOptimizeAll function enables CSRF.Impact: Unauthenticated attackers can modify image...
CVE-2024-0983
CVE-2024-0983 affects the ImageRecycle pdf & image compression WordPress plugin (versions
CVE-2024-0984
CVE-2024-0984 : The WordPress ImageRecycle pdf & image compression plugin is vulnerable in versions ≤ 3.1.13 due to a missing capability check on the disableOptimization function. This allows authenticated users with subscriber-level access and above to disable image optimization (broken access c...
CVE-2024-1089
The CVE-2024-1089 issue affects ImageRecycle pdf & image compression for WordPress (versions
CVE-2024-1090
CVE-2024-1090 affects the ImageRecycle pdf & image compression WordPress plugin up to version 3.1.13. The issue is a missing capability check in stopOptimizeAll, allowing authenticated users with subscriber-level access and above to modify image optimization settings. Root cause: broken access co...
CVE-2024-1334
CVE-2024-1334 affects the ImageRecycle pdf & image compression WordPress plugin (≤3.1.13). Root cause: missing/incorrect nonce validation in enableOptimization enabling CSRF. Impact: unauthenticated attackers can trigger image optimization by tricking an admin into performing an action. Remediati...
CVE-2024-6631
CVE-2024-6631 affects the ImageRecycle pdf & image compression WordPress plugin (versions
CVE-2024-8120
CVE-2024-8120 affects ImageRecycle pdf & image compression (WordPress plugin)
CVE-2024-54266
CVE-2024-54266 affects the ImageRecycle pdf & image compression WordPress plugin. The issue is a Reflected XSS via improper input neutralization during web page generation, impacting versions from custom/n/a up to 3.1.16 . The vulnerability is confirmed in connected sources (Wordfence WordPress v...