EWWW Image Optimizer

Güvenlik açıkları

• CVE-2016-20010kimlik doğrulamasız

  EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is un

  Kritik 10.0

• CVE-2023-40600kimlik doğrulamasız≤ 7.2.0

  WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

  Yüksek 7.5

• CVE-2026-84773kimlik doğrulamasız≤ 8.7.6

  WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.2

• CVE-2026-97067katılımcı+≤ 8.7.7

  WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-15446katılımcı+≤ 8.7.3

  EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content

  Orta 6.4

• CVE-2026-92826kimlik doğrulamasız · tıklama gerekir≤ 8.7.7

  EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key

  Orta 6.1

• CVE-2024-31924kimlik doğrulamasız · tıklama gerekir≤ 7.2.3

  WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2020-36750kimlik doğrulamasız · tıklama gerekir≤ 5.8.1

  EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

  Orta 4.3

• CVE-2014-6243

  Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPress allows remote attackers to inject arb

  Orta 4.3