ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF, d65dac689d778d88ac3adceb7e3f1e0e5c4df345
- CVE, Research URL
- Home page URL
-
Security reports for ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
- Published on
- Sep 15, 2023
- Research Description
- ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF [shortpixel-image-optimiser] < 5.4.2 WordPress ShortPixel Image Optimizer Plugin < 5.4.2 is vulnerable to PHP Object Injection Update the WordPress ShortPixel Image Optimizer plugin to the latest available version (at least 5.4.2). Unknown discovered and reported this PHP Object Injection vulnerability in WordPress ShortPixel Image Optimizer Plugin. This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more if a proper POP chain is present. This vulnerability has been fixed in version 5.4.2.
- Affected versions
-
max 5.4.2.
- Status
-
vulnerable