Kraken

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kraken records in CISA KEV

No Kraken vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kraken.io Image Optimizer 2 records LOW

Records

2 records

TI-2022-18079 CVE-2022-38454 · GHSA-c5x2-5cvx-r2ch

WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00361 Published 2022-09-23 No fix listed CWE-352

TI-2023-00586 CVE-2023-0619 · GHSA-fw8x-2gp4-9r9q

Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update

LOW 30

The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00677 Published 2023-02-01 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0