Extension WordPress
Vulnérabilités reSmush.it : The original free image compressor and optimizer plugin
Cette page rassemble les failles publiées pour reSmush.it : The original free image compressor and optimizer plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de reSmush.it : The original free image compressor and optimizer plugin
3 fiches
reSmush.it Image Optimizer <= 0.4.6 – Cross-Site Request Forgery
The reSmush.it Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.4.6. This is due to missing or incorrect nonce validation on several AJAX calls. This makes it possible for…
*-0.4.6
0.4.7
26/10/2022
reSmush.it Image Optimizer <= 0.4.5 – Authenticated (Administrator+) Cross-Site Scripting
The reSmush.it plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 0.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-0.4.5
0.4.6
19/09/2022
reSmush.it <= 0.4.3 – Missing Authorization
The reSmush.it plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several AJAX actions in versions up to, and including, 0.4.3 . This makes it possible for unauthenticated attackers to download the logs…
*-0.4.3
0.4.4
11/08/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.