Medium · 4.3 CVE-2022-47604 EUVD-2022-50364GHSA-8r8w-555p-94hh

WordPress AJAX Thumbnail Rebuild plugin <= 1.13 - Broken Access Control vulnerability

Published Mar 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: junkcoder, ristoniinemets Product: AJAX Thumbnail Rebuild

Description

Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13.

Affected products

Vendor	Product	Affected	Fixed
junkcoder, ristoniinemets	AJAX Thumbnail Rebuild	≤ 1.13	—

References

https://patchstack.com/database/vulnerability/ajax-thumbnail-rebuild/wordpress-ajax-thumbnail-rebuild-plugin-1-13-broken-access-control-vulnerability?_s_id=cve vdb-entry