Description (CNA)
EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/
- https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt
ADP enrichment
No English description supplied.