reSmush.it : The original free image compressor and optimizer plugin, CVE-2022-2449

CVE, Research URL: CVE-2022-2449
Home page URL: Security reports for reSmush.it : The original free image compressor and optimizer plugin
Application: reSmush.it : The original free image compressor and optimizer plugin
Published on: Nov 14, 2022
Research Description: The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site.
Affected versions: Min -, max 0.4.7.
Status: vulnerable