Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: imagerecycle Clear all filters
TI-2024-36355 CVE-2024-54266 · GHSA-23hv-h2r7-ggj5

WordPress ImageRecycle pdf & image compression plugin <= 3.1.16 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle ImageRecycle pdf & image compression imagerecycle-pdf-image-compression allows Reflected XSS.This issue a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00437 Published 2024-12-13 No fix listed CWE-79
TI-2024-06148 CVE-2024-6631 · GHSA-2prr-7h77-fv63

ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions

Priority LOW 22

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00264 Published 2024-08-24 No fix listed CWE-862
TI-2024-01010 CVE-2024-1090 · GHSA-rmjj-8r22-rwhv

ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll

Priority LOW 20

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stopOptimizeAll function in all versions up to, and including, 3.1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00347 Published 2024-02-20 No fix listed CWE-862
TI-2024-00907 CVE-2024-0984 · GHSA-mcf7-8x34-3jf9

ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization

Priority LOW 20

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including,…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-02-20 No fix listed CWE-862
TI-2024-01009 CVE-2024-1089 · GHSA-9vxm-4m9h-fv2h

ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn

Priority LOW 20

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optimizeAllOn function in all versions up to, and including, 3.1.1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00428 Published 2024-02-20 No fix listed CWE-862
TI-2024-01011 CVE-2024-1091 · GHSA-gp33-9vvc-fgq2

ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Plugin Data Removal in reinitialize

Priority LOW 20

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reinitialize function in all versions up to, and including, 3.1.13…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00347 Published 2024-02-20 No fix listed CWE-862
TI-2024-00906 CVE-2024-0983 · GHSA-j9vj-p8vp-6j8q

ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in enableOptimization

Priority LOW 20

The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enableOptimization function in all versions up to, and including,…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-02-20 No fix listed CWE-862