Skip to content
OpenAdvisories

Product · WPMU DEV

Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2023-3352

    Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion

    The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability check on the delete_resmush_list() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscribe…

    WPMU DEV Smush – Image Optimization, Compression, Lazy Load, WebP & CDN Web / CMS