Lucene search

K
ImagerecycleImagerecycle Pdf & Image Compression

15 matches found

CVE
CVE
added 2024/02/29 1:43 a.m.77 views

CVE-2024-1339

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the reinitialize function. This makes it possible for unauthenticated attackers to remove a...

4.3CVSS5.2AI score0.00108EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.69 views

CVE-2024-0984

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-le...

4.3CVSS4.6AI score0.0033EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.67 views

CVE-2024-1091

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level acc...

4.3CVSS5.2AI score0.00237EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.66 views

CVE-2024-1336

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the optimizeAllOn function. This makes it possible for unauthenticated attackers to modify ...

4.3CVSS5.2AI score0.00112EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.65 views

CVE-2024-1090

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level ...

4.3CVSS5.2AI score0.00237EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.65 views

CVE-2024-1338

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the stopOptimizeAll function. This makes it possible for unauthenticated attackers to modif...

4.3CVSS5.2AI score0.00112EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.64 views

CVE-2024-1335

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the disableOptimization function. This makes it possible for unauthenticated attackers to d...

4.3CVSS5.2AI score0.00112EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.60 views

CVE-2024-0983

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-lev...

4.3CVSS5.2AI score0.0033EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.60 views

CVE-2024-1089

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with subscriber-level ac...

4.3CVSS5.2AI score0.00237EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.55 views

CVE-2024-1334

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13. This is due to missing or incorrect nonce validation on the enableOptimization function. This makes it possible for unauthenticated attackers to en...

4.3CVSS5.2AI score0.00112EPSS
CVE
CVE
added 2024/08/24 3:15 a.m.41 views

CVE-2024-8120

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce validation on several functions in the class/class-image-otimizer.php file. This makes it possible for un...

4.7CVSS4.5AI score0.00054EPSS
CVE
CVE
added 2024/12/13 3:15 p.m.37 views

CVE-2024-54266

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle ImageRecycle pdf & image compression allows Reflected XSS.This issue affects ImageRecycle pdf & image compression: from n/a through 3.1.16.

7.1CVSS7AI score0.00037EPSS
CVE
CVE
added 2024/08/24 3:15 a.m.37 views

CVE-2024-6631

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14. This makes it possible for authenticated attackers, with Subscriber-level access a...

5CVSS4.9AI score0.00097EPSS
CVE
CVE
added 2023/09/04 12:15 p.m.34 views

CVE-2023-40196

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin

7.1CVSS6AI score0.0009EPSS
CVE
CVE
added 2023/09/04 11:15 a.m.29 views

CVE-2023-30494

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin

7.1CVSS6AI score0.00083EPSS