Shortpixel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/shortpixel/ Thu, 23 Feb 2023 05:18:27 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Shortpixel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/shortpixel/ 32 32 CVE-2022-29417 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-29417/ Thu, 23 Feb 2023 05:18:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-29417/ Plugin Settings Update vulnerability in ShortPixel’s ShortPixel Adaptive Images plugin

The post CVE-2022-29417 appeared first on CVE Vulnerability.

]]> Plugin Settings Update vulnerability in ShortPixel’s ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.

The post CVE-2022-29417 appeared first on CVE Vulnerability.

]]> CVE-2022-2554 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2554/ Thu, 23 Feb 2023 05:17:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2554/ The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

The post CVE-2022-2554 appeared first on CVE Vulnerability.

]]> The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

The post CVE-2022-2554 appeared first on CVE Vulnerability.

]]> CVE-2023-0255 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0255/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0255 The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

The post CVE-2023-0255 appeared first on CVE Vulnerability.

]]> The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

The post CVE-2023-0255 appeared first on CVE Vulnerability.

]]>