Priority LOW 32
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle ImageRecycle pdf & image compression imagerecycle-pdf-image-compression allows Reflected XSS.This issue a…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00437 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.11 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-09-04 · No fix listed CWE-79
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.10 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-09-04 · No fix listed CWE-79
Priority LOW 22
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00264 · Published 2024-08-24 · No fix listed CWE-862
Priority LOW 21
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14.
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00193 · Published 2024-08-24 · No fix listed CWE-352
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00246 · Published 2024-02-20 · No fix listed CWE-352
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2024-02-20 · No fix listed CWE-862
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2024-02-20 · No fix listed CWE-862
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.1…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2024-02-20 · No fix listed CWE-862
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including,…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2024-02-20 · No fix listed CWE-862
Priority LOW 20
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including,…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2024-02-20 · No fix listed CWE-862
Priority LOW 19
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00208 · Published 2024-02-20 · No fix listed CWE-352
Priority LOW 19
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00208 · Published 2024-02-20 · No fix listed CWE-352
Priority LOW 19
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00208 · Published 2024-02-20 · No fix listed CWE-352
Priority LOW 19
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.13.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00208 · Published 2024-02-20 · No fix listed CWE-352