Extension WordPress
Vulnérabilités Smush – Image Optimization, Compression, Lazy Load, WebP & CDN
Cette page rassemble les failles publiées pour Smush – Image Optimization, Compression, Lazy Load, WebP & CDN, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Smush – Image Optimization, Compression, Lazy Load, WebP & CDN
6 fiches
Smush Image Compression and Optimization <= 3.17.0 – Authenticated (Admin+) Directory Traversal
The Smush Image Optimization – Optimize Images | Compress & Lazy Load Images | Convert WebP & AVIF | Image CDN plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.17.0. This…
*-3.17.0
3.17.1
29/03/2025
Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 – Missing Authorization to Resmush List Deletion
The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber,…
*-3.16.4
3.16.5
20/06/2024
Smush – Lazy Load Images, Optimize & Compress Images <= 3.9.8 – Cross-Site Scripting
The Smush – Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'name' and 'description' parameters in versions up to, and including, 3.9.8 due to insufficient input sanitization and…
*-3.9.8
3.9.9
03/05/2022
Smush – Lazy Load Images, Optimize & Compress Images <= 2.9.1 – Cross-Site Scripting
The Smush – Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to Cross-Site Scripting leading in versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.9.1
3.0.0
10/12/2018
Smush – Lazy Load Images, Optimize & Compress Images <= 3.0.0 – Authenticated PHAR Deserialization
The Smush – Lazy Load Images, Optimize & Compress Images plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 3.0.0. This makes it possible for authenticated attackers…
*-3.0.0
3.0.1
10/12/2018
Smush – Lazy Load Images, Optimize & Compress Images <= 2.7.5 – Directory Traversal
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
*-2.7.5
2.7.6
21/09/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.