Vendors / Ewww Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Ewww records in CISA KEV No Ewww vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03701 · Published 2021-05-05 · No fix listed
Priority MEDIUM 43
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02019 · Published 2023-11-30 · No fix listed CWE-200
Priority LOW 20
The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00384 · Published 2023-07-12 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
1 1 1 0 0
