Extension WordPress
Vulnérabilités Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize
Cette page rassemble les failles publiées pour Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize
3 fiches
Kraken.io Image Optimizer <= 2.6.9 – Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.9. This makes it possible for authenticated attackers, with subscriber-level…
*-2.6.9
2.7.0
01/02/2023
Kraken.io Image Optimizer <= 2.6.7 – Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
TheKraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its kraken_media_library_reset_all AJAX action in versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level…
*-2.6.7
2.6.8
17/01/2023
Kraken.io Image Optimizer <= 2.6.5 – Cross-Site Request Forgery
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.6.5. This is due to missing nonce validation on the kraken_settings_page() function. This makes it possible for unauthenticated attackers…
*-2.6.5
2.6.6
23/09/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.