Resmush.it Resmush.it Image Optimizer
3 CVEs affecting Resmush.it Resmush.it Image Optimizer. Latest disclosed: 2022-11-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2449 | Medium | 6.5 | 2022-11-14 | The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowi… |
CVE-2022-2448 | Medium | 4.8 | 2022-10-10 | The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2022-2450 | Medium | 4.3 | 2022-11-14 | The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged… |