Input validation vulnerability in Image Compressor & Optimizer – iLoveIMG 1.0.6

The Image Compressor & Optimizer – iLoveIMG plugin for WordPress has a security vulnerability that could make it possible for people with administrative access to inject a malicious piece of code into the plugin. This code could be used to delete files, access sensitive information, or even execute code. All versions of the plugin up to 1.0.6 are vulnerable. There is no additional protection from the plugin itself, so if there is a different plugin or theme installed on the website, the malicious code could be even more dangerous.