CVE-2022-2450 — reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

CVE-2022-2450

reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls PUBLISHED

Description (CNA)

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them.

Affected (CNA)

Vendor / product	Versions
Unknown / reSmush.it : the only free Image Optimizer & compress plugin	affected 0.4.4 before 0.4.4

CWE

CWE-862

References

https://wpscan.com/vulnerability/1b3ff124-f973-4584-a7d7-26cc404bfe2b

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/1b3ff124-f973-4584-a7d7-26cc404bfe2b

CISA-ADP

No English description supplied.

No references supplied.