Vulnerabilities

TI-2023-21398 CVE-2023-40600 · GHSA-9vqm-pq4q-h6cw

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

MEDIUM 43

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02019 Published 2023-11-30 No fix listed CWE-200

TI-2020-18919 CVE-2020-36750 · GHSA-g7q2-c4xh-c3xc

EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

LOW 20

The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-12 No fix listed CWE-352

TI-2016-09188 CVE-2016-20010 · GHSA-rw8g-4h9m-5248

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a…

MEDIUM 49

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03701 Published 2021-05-05 No fix listed

Vulnerabilities

Filters

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a…