Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WP Compress – Image Optimizer [All-In-One] 6.20.01

  • Severity: medium-risk
  • Status: Fixed
  • Publication: May 13, 2024

The WP Compress – Image Optimizer plugin for WordPress has a security issue that allows unauthorized changes to be made to the data. This is because certain functions in versions up to 6.20.01 do not have the necessary checks in place. This vulnerability can be exploited by attackers who are logged in with subscriber-level permissions or higher. They can edit the plugin settings and potentially store harmful code in multisite environments.

Detected in:

WP Compress – Image Optimizer [All-In-One] fixed vulnerable versions: >= * <= 6.20.01
WP Compress – Instant Performance & Speed Optimization fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.