Smush – Optimize, Compress and Lazy Load Images, CVE-2023-3352

CVE, Research URL: CVE-2023-3352
Home page URL: Security reports for Smush – Optimize, Compress and Lazy Load Images
Application: Smush – Optimize, Compress and Lazy Load Images
Published on: Jun 21, 2024
Research Description: The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to delete the resmush list for Nextgen or the Media Library.
Affected versions: Min -, max 3.16.5.
Status: vulnerable

Smush &#8211; Optimize, Compress and Lazy Load Images, CVE-2023-3352