Vulnerabilities

TI-2025-20163 CVE-2025-27316 · GHSA-h764-fh5p-vfc9

WordPress JPG, PNG Compression and Optimization Plugin <= 1.7.35 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in hosting.io JPG, PNG Compression and Optimization wp-image-compression allows Cross Site Request Forgery.This issue affects JPG, PNG Compression and Optimization: from n/…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00171 Published 2025-02-24 No fix listed CWE-352

TI-2024-36497 CVE-2024-54411 · GHSA-5fcg-g7jg-hx9p

WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in hosting.io WP Controller wp-management-controller allows Stored XSS.This issue affects WP Controller: from n/a through <= 3.2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00215 Published 2024-12-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress JPG, PNG Compression and Optimization Plugin <= 1.7.35 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability