Skip to content
OpenAdvisories

Vendor

mecanik

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-8723 Public exploit EPSS 19%

    Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook

    The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispatch() method in all versions up to, and including, 1.5.6. This makes it possibl…