Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-29417 EUVD-2022-33755GHSA-2w64-8h5x-5x42

WordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability

Published Apr 25, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings.

Affected products

VendorProductAffectedFixed
ShortPixel ShortPixel Adaptive Images (WordPress plugin) <= 3.3.1 – ≤ 3.3.1 —

References